Senior Security Engineer

DeleteMe is the leader in proactive privacy protection. We help Individuals, Families, Businesses and Security teams reduce their human attack surface by continuously monitoring and removing exposed personal data (PII) from the open web — the very data threat actors use to launch social engineering, phishing, Gen-AI deepfake, doxxing campaigns, physical threats, and identity fraud.

Operating as a fast-growing, global SaaS company, DeleteMe serves both consumers and enterprises. DeleteMe has completed over 100 million opt-out removals, helping customers reduce risks associated with identity theft, spam, doxxing, and other cybersecurity threats. We deliver detailed privacy reports, continuous monitoring, and expert support to ensure ongoing protection.

DeleteMe acts as a scalable, managed defense layer for your most vulnerable attack vector: your people. That’s why 30% of the Fortune 100, top tech firms, major banks, federal agencies, and U.S. states rely on DeleteMe to protect their workforce.

DeleteMe is led by a passionate and experienced team and driven by a powerful mission to empower consumers with privacy.

• Vulnerability & Patch Management Ownership: You will own the full lifecycle of vulnerability management. This is not just "scanning"—it is the strategic coordination with Engineering to prioritize, track, and validate patches. You must be able to categorize risks based on exploitability and business impact to drive meaningful remediation.
• AppSec Pipeline Integration: Expert knowledge of the "Shift Left" philosophy. You are responsible for the administration and oversight of SAST (Static Analysis), DAST (Dynamic Analysis), and SCA (Software Composition Analysis) tools to identify vulnerabilities in custom code and third-party libraries.

• Detection & Response Engineering: Lead the administration of Crowdstrike Falcon and our Next-Gen (NG) SIEM. Design complex integrations, create and tune correlation rules, and develop automated alerts to reduce MTTD.
• Network Security Engineering: Architect and maintain secure network boundaries. This includes configuring and auditing AWS VPCs / GCP VPCs, Security Groups, Firewall Rules, WAF (Web Application Firewalls), and implementing micro-segmentation to support a Zero Trust architecture.
• Security Architecture: Design and configure advanced security architectures within AWS and GCP. Actively identify and remediate gaps in Cloud Security Posture Management (CSPM), identity security, and Data Loss Prevention (DLP).
• Vulnerability Coordination: Lead the "Security vs. Engineering" patch cycle. Utilize Jira to manage the Plan of Action and Milestones (POAM) for vulnerabilities, ensuring Engineering teams have clear, actionable requirements.
• Operational Excellence & Reporting: Act as a Jira power user to build and manage sophisticated dashboards for Incident Response metrics, POAM tasks, and identity management health.
• Identity & Access Management: Manage and optimize identity services (Okta/SCIM), ensuring robust authentication and authorization across all platforms.
• Compliance & Governance: Oversee security controls for SOC 2 Type 2 and work toward FedRAMP Moderate (or higher) standards.

• Technical Expertise:
• Expert-level administration of Crowdstrike Falcon and NG SIEM platforms.
• Strong background in Network Security, including VPNs, SD-WAN, VPC Peering, Transit Gateways, and Traffic Mirroring/Analysis.
• Heavy expertise in AWS and GCP security architecture (IAM, S3, EC2, GuardDuty, AWS Config, etc.).
• Deep proficiency in Jira, including advanced dashboarding and workflow customization.
• Proven experience with SAST/DAST/SCA tools (e.g., Snyk, Checkmarx, Wiz, or GitHub Advanced Security).
• Experience & Education:
• 7-10 years of experience in Security Engineering.
• Direct experience with FedRAMP Moderate or higher (Highly Preferred).
• Experience with Okta for enterprise identity management.
• Soft Skills:
• High level of initiative; ability to drive projects with minimal supervision.
• Strong communication skills to negotiate remediation timelines with Engineering leads.
•