- Company Name
- HubSpot
- Job Title
- Security Engineer
- Job Description
-
**Job title**
Security Engineer
**Role Summary**
Deploy, configure, and maintain security tools to protect organizational assets. Lead implementation of SASE, EDR, endpoint privilege management, application allowlisting, email security, and SIEM solutions. Troubleshoot issues, automate processes, evaluate new technologies, and provide training to the security team.
**Expectations**
- 3+ years experience in security engineering or similar role.
- Bachelor’s degree in Computer Science, Information Security, or equivalent.
- Valid certifications: CISSP, GIAC, CEH, or vendor‑specific (CrowdStrike, Netskope, etc.).
**Key Responsibilities**
1. Plan, deploy, and configure security tools (SASE, EDR, DMZ, SIEM).
2. Troubleshoot and resolve tool‑related incidents in real‑time.
3. Conduct research, perform proof‑of‑concepts, and recommend new security technologies.
4. Integrate tools with cloud (AWS, Azure, GCP) and on‑premises environments.
5. Automate tool operations using Python, PowerShell, or Bash scripts.
6. Document tool configuration, troubleshooting procedures, and best practices.
7. Collaborate with incident response, vulnerability management, and other security teams.
8. Mentor junior team members and deliver tool‑specific training.
**Required Skills**
- Hands‑on experience with endpoint protection, EDR, SIEM, DLP, vulnerability management, and network security tools.
- Strong troubleshooting across hardware and software security solutions.
- Scripting: Python, PowerShell, Bash.
- Knowledge of network protocols, cloud security, and frameworks (MITRE ATT&CK, NIST, CIS).
- Ability to configure and manage tools in AWS, Azure, or GCP.
- Analytical, problem‑solving, and communication skills.
- Self‑motivated and capable of managing multiple projects.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- Certifications: CISSP, GIAC, CEH, or vendor‑specific credentials (CrowdStrike, Netskope, Tenable, etc.).