Security Engineer

Credo is hiring a hands-on Security Engineer to help protect systems, infrastructure, cloud environments, applications, endpoints, and data in an onsite role in San Jose.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents across endpoint, identity, email, network, cloud, and application environments
• Lead or support containment, remediation, and recovery activities during incidents
• Administer and tune enterprise security platforms including SIEM, EDR/XDR, firewall/SASE, email security, and DLP
• Manage detection rules, integrations, health checks, and automation for security tooling
• Conduct vulnerability and exposure assessments, prioritize remediation based on risk, coordinate fixes with IT and application owners, and validate completion
• Support security monitoring and secure configuration across AWS, Azure, and Google Cloud
• Perform technical security reviews of vendors, SaaS applications, and new technologies
• Document findings, runbooks, and evidence for audits and operational needs
• Support risk assessments and audits aligned with ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK
• Contribute to security projects and continuous improvement initiatives

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or a related field (or equivalent practical experience)
• At least 3 years in security engineering, security operations, incident response, or vulnerability management
• Hands-on experience investigating security alerts and incidents and analyzing logs from multiple technologies and data sources
• Experience administering or supporting enterprise security tools, including working knowledge of vulnerability assessment, prioritization, remediation, and validation
• Strong understanding of endpoint, network, identity, email, cloud, application, and data-security principles
• Familiarity with Windows and Linux/Unix, TCP/IP, DNS, VPNs, firewalls, and least privilege
• Scripting or automation skills in Python, PowerShell, or Bash
• Strong documentation and problem-solving ability, plus communication skills to explain risks to technical and non-technical stakeholders

Technologies

• Python, PowerShell, Bash
• SIEM, EDR/XDR
• Firewall/SASE, email security, DLP
• ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Windows, Linux/Unix, TCP/IP, DNS, VPNs
• Rapid7, Tenable
• CrowdStrike, Microsoft De-fender
• Palo Alto Networks Prisma/Strata
• Proofpoint
• Microsoft 365 security
• AWS, Azure, GCP
• PAM, PKI, Jira

Preferred Qualifications

• Experience with Rapid7, Tenable, CrowdStrike or Microsoft De-fender, Palo Alto Networks Prisma/Strata, and Proofpoint
• Familiarity with Microsoft 365 security, cloud-security tooling across AWS, Azure, or GCP, and DLP or data-security platforms
• Exposure to PAM and password vaults, PKI, application control, micro-segmentation, and virtualization technologies
• Experience with security orchestration, workflow automation, and ticketing or re-remediation tracking (e.g., Jira)

Certifications (examples)

• Security+, CySA+, GCIH, GCIA
• AWS Security Specialty, Azure Security Engineer
• Google Cloud Security Engineer
• CISSP/Associate of ISC2

Compensation and Location

• Location: San Jose, CA (onsite)
• Salary: USD 90,000 - 110,000 per year

Benefits

• Discretionary bonus
• Equity
• Full range of medical and other benefits
• Base salary range is $90,000 - $110,000 a year