The Role
Senior individual contributor responsible for designing and owning security engineering programs: security tooling, identity and access architecture, cloud security posture (GCP), detection engineering and SIEM operation, incident response and forensics, OAuth and third-party app governance, secrets and MFA strategy, endpoint and vulnerability management, and security automation/Infrastructure-as-Code. Mentors teammates and partners with platform engineering and IT leadership to implement controls and automation.
Summary Generated by Built In
The Role
The Senior Security Engineer is a newly established senior individual contributor role that will drive the design, implementation, and continuous advancement of Wpromote's security engineering program.
Reporting to the Director of IT, you will operate as a true partner to IT leadership, trusted to shape security decisions with a depth of expertise that elevates the whole organization. This is not an analyst or application security role; you will be expected to build and improve our security systems, ideal for someone energized by owning a domain end to end and continuously raising the bar.
This is a remote role, serving as a senior security presence and point of escalation across the function.
Reporting to the Director of IT, you will operate as a true partner to IT leadership, trusted to shape security decisions with a depth of expertise that elevates the whole organization. This is not an analyst or application security role; you will be expected to build and improve our security systems, ideal for someone energized by owning a domain end to end and continuously raising the bar.
This is a remote role, serving as a senior security presence and point of escalation across the function.
At Wpromote, we believe that great work is only possible with great people. Our goal is to build a better, more inclusive work environment and support our people at every stage of their careers by prioritizing a strong work-life balance through our policies and benefits listed below. As a Best Place to Work according to both Ad Age and Glassdoor and Adweek’s Fastest Growing Digital Agency, we are moving fast to expand our teams and bring new experts into the fold to keep pushing the boundaries of what’s possible in marketing.
We offer:
-Unlimited PTO
-Extended Holiday break (Winter)
-100% paid parental leave
-401(k) matching
-Medical, Dental, Vision, Life, Pet Insurance
-Sponsored life insurance
-Short Term Disability insurance and additional voluntary insurance
-Annual Class Pass credits and more!
The anticipated annual salary for this role will range from $145,000 - $170,000, based on a variety of factors unique to each candidate, including skill set, years and depth of experience, education and certifications, competitive benchmarks, scope of responsibility, market dynamics, geographic location, and the respective state’s salary threshold for exempt employees. At Wpromote, pay ranges are subject to change and are based on specific market medians for similar jobs according to third-party salary benchmark surveys. Individual pay within that range can vary due to skills, experience, and available budget. The total compensation package for this role will include benefits (listed above).
*This position may be performed remotely in most states within the US, with some exclusions
**While this role offers the flexibility to work remotely, we have office hubs in Los Angeles, Chicago, and New York, where you can join in on learning and development opportunities, fun events, take advantage of a space to work, and collaborate in person!
***This position is not eligible for immigration sponsorship
Important Notice: Beware of Job Scams
Wpromote recruiting communications will only be sent through our official channels via wpromote.com email addresses. If you see a posting elsewhere that is not reflected on Wpromote.com/careers, it may be a fraudulent posting. We do not require payment or fees during the hiring process nor do we request sensitive information, such as Social Security numbers or payment details. Please safeguard yourself against possible scams and contact us if you encounter any suspicious activity.
#LI-SD
#LI-Remote
You Are
- Composed under fire: When a security event lands, you move toward it, not away. You stay methodical and let the evidence drive your decisions, instead of panicking or jumping to conclusions.
- Relentlessly current: You live at the leading edge of the security field, tracking emerging threats, techniques, and tooling, and you treat staying ahead of the threat landscape as a core part of the job rather than an afterthought.
- Evidence-driven and precise: You distinguish what is observed from what is assessed, and you hold that line even when stakeholders are pushing for a certainty you cannot yet responsibly give.
- Deeply autonomous: You own investigations end to end, escalating genuine judgment calls rather than routine unknowns, and you operate with high autonomy on security architecture and incident decisions.
- A detailed planner who executes: You translate ambiguous problems into granular, sequenced plans of action, then deliver against them. Your plans are specific enough that others can trust and follow them.
- A builder at heart: You are energized by owning solutions, testing new ideas, and driving improvements quickly rather than settling for the status quo.
- An audience-aware communicator: You write clearly for executive, technical, and non-technical readers, and you exhibit good judgement and discretion during sensitive incidents where accuracy, confidentiality, and timing matter
You Will Be
- Owning the Security Tooling Portfolio: Evaluating, integrating, and rationalizing the security tool stack so investments are coherent, well-integrated, and earning their value
- Owning Identity and Access Architecture: Designing identity, access, and session governance across Google Workspace and additional identity providers, including least-privilege design, credential and secrets hygiene, service-identity architecture, and joiner, mover, and leaver controls at the design layer.
- Governing Cloud Security Posture: Defining security requirements for the GCP environment and translating them into policy and controls across Cloud IAM, organization policy, service account governance, and audit logging. Partnering with platform engineering on implementation, governing posture against those requirements, and feeding cloud telemetry into the detection pipeline.
- Advancing Authentication and Secrets: Driving our phishing-resistant MFA strategy such as passkeys and hardware keys, strengthening secrets-management architecture, and advancing SAML SSO, SCIM provisioning, and session policy across the SaaS environment.
- Governing OAuth and Token Lifecycle: Owning OAuth app vetting and governance, token lifecycle and revocation, and third-party application risk management.
- Owning Incident Response: Owning incident response and forensic practice, running investigations independently, and coordinating external partners during major escalations.
- Applying Security Automation and DaC: Treating detection, policy, configuration, and response automation as code that is version-controlled, peer-reviewed, and tested. Partnering with platform engineering on Terraform and cloud guardrails where security controls intersect with infrastructure.
- Developing Internal Capability: Mentoring and developing team members on security practice over time, and partnering with the Director of IT to inform security decisions across the organization.
You Must Have
- 5+ years of hands-on security engineering experience in a professional environment, with a track record of owning security architecture and projects end to end
- Detection engineering experience, including selecting, building, and operating a SIEM, writing and tuning detections, and owning log pipelines, alerting, and monitoring
- 4+ years of hands-on security cloud engineering, GCP strongly preferred, including Cloud IAM, organization policy, service account governance, and audit logging
- Deep identity and access management expertise, including federation (SAML SSO) and SCIM provisioning and deprovisioning
- SaaS identity security depth, including phishing-resistant MFA (passkeys, hardware keys), secrets-management architecture, and OAuth app governance, token lifecycle, and third-party application risk
- Hands-on incident response and forensic methodology, including sound evidence handling
- Endpoint security posture experience, including EDR operations (CrowdStrike Falcon or equivalent) and device-trust or conditional-access design
- Experience operating vulnerability management or exposure management programs, including prioritization by exploitability, asset criticality, and business risk
- Security automation and infrastructure-as-code fluency, including detection-as-code and a tool such as Terraform, at a level beyond ad hoc scripting
Nice to Have
- A background in infrastructure, cloud platform, DevOps, SRE, or systems engineering before moving into security, bringing an automation-first foundation to detection and governance work
- Experience scaling or maturing a security program in a fast-growing environment
- Industry certifications (GCP Professional Cloud Security Engineer, GIAC such as GCIH, GCDA, or GDAT, CISSP, OSCP)
- Experience managing least-privilege access across many vendor systems, including those that do not support SSO
- Player-coach or mentoring experience: while this role is scoped as a senior individual contributor, candidates who can develop internal talent will be considered for expanded scope
- Exposure to SOC 2 or similar compliance frameworks, partnering with GRC on audit readiness
- Scripting and automation experience (Python, Bash) for security tooling and workflow optimization
Wpromote is committed to bringing together individuals from different backgrounds and perspectives, providing employees with a safe and welcoming environment free of discrimination and harassment. We strive to create a diverse & inclusive environment where everyone can thrive, feel a sense of belonging, and do impactful work together. As an equal opportunity employer, we prohibit any unlawful discrimination against a job applicant on the basis of their race, color, religion, gender, gender identity, gender expression, sexual orientation, national origin, family or parental status, disability*, age, veteran status, or any other status protected by the laws or regulations in the locations where we operate. We respect the laws enforced by the EEOC and are dedicated to going above and beyond in fostering diversity across our workplace.
Applicants with disabilities may be entitled to reasonable accommodation under the terms of the Americans with Disabilities Act and certain state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Wpromote.
This employer participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the Form I-9. For more information on E Verify, or if you believe that your employer has violated its E-Verify responsibilities, please contact DHS.
Skills Required
- 5+ years of hands-on security engineering experience in a professional environment, with a track record of owning security architecture and projects end to end
- Detection engineering experience, including selecting, building, and operating a SIEM, writing and tuning detections, and owning log pipelines, alerting, and monitoring
- 4+ years of hands-on security cloud engineering, GCP strongly preferred, including Cloud IAM, organization policy, service account governance, and audit logging
- Deep identity and access management expertise, including federation (SAML SSO) and SCIM provisioning and deprovisioning
- SaaS identity security depth, including phishing-resistant MFA (passkeys, hardware keys), secrets-management architecture, and OAuth app governance, token lifecycle, and third-party application risk
- Hands-on incident response and forensic methodology, including sound evidence handling
- Endpoint security posture experience, including EDR operations (CrowdStrike Falcon or equivalent) and device-trust or conditional-access design
- Experience operating vulnerability management or exposure management programs, including prioritization by exploitability, asset criticality, and business risk
- Security automation and infrastructure-as-code fluency, including detection-as-code and a tool such as Terraform, at a level beyond ad hoc scripting
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Wpromote is an award-winning digital marketing agency with offices across the United States. Named the Leader in the Forrester Performance Marketing Wave, we help brands Think Like A Challenger to drive transformational growth. Challenger clients include leading brands such as Whirlpool, Zenni, Adobe, TransUnion, Frontier Airlines, and more. Our mission is to build and deploy holistic, agile marketing strategies that drive significant results for our clients. We partner with clients to capture market share by authentically connecting with the right customers across channels at every stage of the customer journey, increasing customer lifetime value, and outsmarting the competition instead of outspending them. Our teams think outside of the box and challenge the status quo because Wpromote actively builds a culture that prioritizes creativity, innovation, and passion in service of our clients’ goals.
