Logo for KPA

Senior Information Security Engineer

KPA

Role overview

Qualifications

  • 5+ years of experience in security engineering, cloud security, infrastructure security, or a related senior technical role
  • Strong knowledge of identity security, endpoint security, vulnerability management, network security, incident response, and zero trust principles
  • Experience securing Azure, AWS, Microsoft 365, Entra ID, Windows, and Linux
  • Relevant certifications such as CompTIA Security+, CISSP, CCSP, AWS Certified Security, or equivalent certifications are preferred

Responsibilities

  • Own KPA's enterprise security platforms, including CrowdStrike, Rapid7, Cisco Umbrella, and related technologies
  • Lead vulnerability management and remediation, endpoint security, identity security, and penetration testing initiatives
  • Lead security incident response, investigations, and post-incident reviews
  • Partner with DevOps to integrate security into CI/CD pipelines and cloud workloads

Key facts

Hard skills

Other skills

  • Governance
  • Communication
  • Problem Solving

About the company

KPA logo

KPA

RegTech (Regulatory & Compliance Technology)

KPA is a leading provider of Safety Management and Workforce Compliance software and services for a wide range of businesses. KPA solutions enable clients to identify, remedy, and prevent workplace safety and compliance problems across their entire enterprise. The combination of KPA’s software platform, expert consulting services, and award-winning training helps organizations minimize risk so they can focus on what's important—their core business. For over 30 years, KPA has helped 10,000+ clients achieve regulatory compliance, control risk, and protect assets. KPA offers a unique combination of safety management and compliance software, an award-winning training library, and on-site services provided by 125+ experienced EHS and F&I consultants. The suite of services, training, and software helps our clients increase productivity, control costs, and reduce financial and reputational risk.

Company details

Company typeSME
IndustryRegTech (Regulatory & Compliance Technology)
Company size201 - 500

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

Position Description:

KPA is seeking a Senior Information Security Engineer to serve as the senior technical counterpart to the Director of Security & Technology. This role owns KPA's security platforms, cloud security, identity, automation, and technical security initiatives. The ideal candidate is a hands-on security engineer with strong cloud and infrastructure experience who can independently lead complex security projects, partner effectively with IT Operations and DevOps, and continuously improve KPA's security posture.


Responsibilities:
  • Own KPA's enterprise security platforms, including CrowdStrike, Rapid7 (InsightIDR, InsightVM, InsightAppSec, MDR), Cisco Umbrella, Cisco Duo, KnowBe4, and related technologies.
  • Lead vulnerability management and remediation, endpoint security, identity security, privileged access, penetration testing, and security hardening initiatives.
  • Lead security incident response, investigations, containment, remediation, and post-incident reviews.
  • Own the ongoing operation of SOC 2 controls, security audit requirements, and technical compliance initiatives.
  • Own Cisco Meraki security, VPN infrastructure, network security controls, and secure cloud connectivity.
  • Secure Azure, AWS, Microsoft 365, Entra ID, AWS Identity Center, Auth0, and cloud-native workloads using modern security best practices.
  • Administer and improve identity governance across Microsoft Entra ID, Cisco Duo, AWS Identity Center, Auth0, SSO, SCIM, Conditional Access, PIM, privileged accounts, service accounts, and authentication architecture.
  • Partner with DevOps to integrate security into CI/CD pipelines, Infrastructure as Code, containers, Kubernetes, and cloud workloads, including SAST, DAST, Snyk, and other application security technologies.
  • Own and continually improve KPA's cloud security posture management, workload protection, identity controls, logging, alerting, detection engineering, and remediation processes.
  • Own email security across Microsoft 365, SendGrid, Amazon SES, SPF, DKIM, DMARC, and phishing protection.
  • Build security automation using PowerShell, Python, Microsoft Graph, REST APIs, and AI-assisted development.
  • Lead security assessments for new vendors, SaaS platforms, cloud services, and third-party integrations; administer third party vendor management (TPVM) and support ongoing vendor risk management.
  • Administer and improve KPA's security awareness program, security policies, standards, and technical procedures.
  • Support AI security and governance initiatives, including ChatGPT Enterprise, Claude, MCP, and emerging AI technologies.
  • Support security architecture reviews for new cloud services, platforms, integrations, and technical initiatives.
  • Proactively identify security gaps, technical debt, and opportunities to improve KPA's security posture through automation, AI, and modern engineering practices.

    • Qualifications:
  • 5+ years of experience in security engineering, cloud security, infrastructure security, or a related senior technical role.
  • Strong knowledge of identity security, endpoint security, vulnerability management, network security, incident response, and zero trust principles.
  • Experience securing Azure, AWS, Microsoft 365, Entra ID, Windows, and Linux.
  • Familiarity with CI/CD pipelines, Kubernetes, container security, application security scanning, and DevSecOps practices.
  • Scripting and automation experience using PowerShell, Python, REST APIs, or similar technologies.
  • Experience supporting SOC 2 & NIST CSF or comparable security and compliance frameworks.
  • Relevant certifications such as CompTIA Security+, CISSP, CCSP, AWS Certified Security, or equivalent certifications are preferred.
  • Excellent communication, documentation, project leadership, and problem-solving skills.
  • Bachelor's degree in Computer Science, Information Technology or Cybersecurity or equivalent experience.

    • Success Criteria:
  • Work ethic that aligns with KPA's core values:
  • Trust: earning trust through integrity, expertise, and acting in the client's best interest.
  • Innovation: continuously seeking out ways to better serve clients.
  • Excellence: holding ourselves to high standards in everything we do.
  • Results: moving with purpose to deliver meaningful outcomes.
  • Owns and continually improves KPA's enterprise security platforms and technical security controls.
  • Improves KPA's security posture across endpoints, identity, networking, cloud, and DevOps environments.
  • Delivers complex security initiatives with strong planning, communication, documentation, testing, and post-implementation validation.
  • Reduces manual security work through automation and modern engineering practices.
  • Serves as the senior escalation point for complex security incidents and technical security issues.
  • Partners effectively with IT Operations and DevOps to embed security into operational and development workflows.

    • Physical Requirements: Physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
  • Working at a computer typing and view a screen - Constantly
  • Stationary sitting or standing - Constantly
  • Visual Recognition - Constantly
  • Hearing/Listening - Occasionally
  • Communicating verbally and/or in writing - Occasionally
  • Travel - Seldom

    • Compensation:
  • Annual base salary range between $110-150k commensurate with experience.
  • Bonus potential of 10% annually.
  • This is a full time, exempt position.
    •

    Apply once. Then go straight to the hiring manager.

    After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

    MR

    Marcus Rivera

    Chief Revenue Officer

    m.rivera@company.com
    linkedin.com/in/marcusrivera
    Unlocked after you apply
    ·

    Security Engineer Related jobs

    Colorado (USA)Security Engineer

    Other jobs at KPA

    Premium

    Reach out to the hiring manager directly.

    Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

    • Full match report with fit score and gaps
    • Career diagnostics on how recruiters read you
    • Curated company matches and warm intros
    • 48h early access to new roles

    Cancel anytime.