About the role
The TKWW InfoSec Team is seeking a Senior Security Engineer to lead strategic security initiatives, mentor team members, and address the most complex and ambiguous technical and programmatic security challenges. You will act as a subject-matter expert, taking ownership of critical security domains, influencing architectural decisions across engineering teams, and helping to set the long-term vision for security at TKWW.
Responsibilities
•Lead and drive the strategy, design, and implementation of security controls and secure patterns across all TKWW corporate and production environments.
•Mentor junior security engineers and provide technical guidance on complex security issues, fostering a culture of security within engineering.
•Architect and implement advanced, secure, and scalable containerized architectures in multi-cloud environments.
•Collaborate with engineering leads to define product and platform roadmaps, ensuring security requirements are integrated from the initial design phase.
•Own and continuously improve threat detection, application security, vulnerability management, and assessment procedures, acting as the final escalation point for complex remediation efforts.
•Act as a Subject Matter Expert (SME) for one or more critical security domains (e.g., Identity and Access Management, Data Protection, Cloud Network Security).
•Lead the response and post-mortem analysis for high-severity security incidents, driving long-term preventative measures.
•Identify and implement strategic opportunities to improve process maturity and automation, including developing sophisticated internal security tools and procedures.
•Provide continuous technical support and escalation management for security-related issues throughout TKWW.
Requirements
•Bachelor's Degree in Computer Science or a related field (Master's degree preferred).
•A minimum of 5+ years of progressive security engineering or security architecture experience, with a focus on large-scale, production environments.
•5+ years of hands-on experience securing cloud applications and infrastructure (AWS strongly preferred, multi-cloud experience a plus).
•Proven track record of leading or mentoring major cross-functional projects to their successful completion.
•Deep and comprehensive understanding of security vulnerabilities, attacker exploit techniques, and methods for large-scale, automated remediation.
•Expert-level understanding/working knowledge of public cloud infrastructure and services in Akamai, AWS (IAM, VPC, KMS, CloudWatch, Systems Manager, S3, RDS, Route53, Lambda, AWS Config, etc.).
•Expert-level understanding of Docker and container orchestration with Kubernetes and hands-on experience securing production EKS/GKE clusters.
•Proven experience with advanced application security concepts, including designing and securing microservice and API-based architectures.
•Experience with security tooling, including WAF and Bot Management platforms.
•Excellent written and verbal communication skills, with the ability to articulate complex security risks and technical requirements to both non-technical executive stakeholders and highly technical engineering/DevOps teams.
•Proven ability to operate with a high degree of autonomy, acting as a self-starter who drives projects to successful completion with minimal oversight.
Nice to have
•Experience with scripting and automation (Python, Go, or other modern languages).
•Relevant industry certifications (e.g., CISSP, CISM, AWS/Azure Security, GSEC).
•Advanced experience in security engineering, DevOps, or IT operations roles, with expertise in CI/CD pipeline security.
•Experience in defining and enforcing security policies across a diverse, global organization.
Benefits and conditions
We believe in a wide range of holistic offerings to support our employees so that they can live our values day in and day out. From mental wellbeing, physical health and financial planning, to engaging perks and discounts, we are in the business of celebrating and supporting the Moments that Matter, both in and out of the office. We offer flexible vacation, generous parental leave, and prioritize initiatives that support the growth, development, and happiness of our people. Together@TKWW is our approach to hybrid work. It's designed to support how we work best: combining the flexibility we value with meaningful opportunities to connect in person. For Together@TKWW-eligible roles, this includes regular in-office time to foster collaboration and connection. For roles not eligible for in-office expectations, we support connection through virtual collaboration and intentional gatherings.
