Senior Security Engineer

XBOX

. Design and operate security controls across systems, including secure configurations, identity controls, network segmentation, and logging .

Posted 10/5/2026full-timeRemote • California • United StatesSenior💰 $102,800 - $190,204 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security engineering, focusing on secure configurations, identity controls, and network security across cloud environments. Proficient in Python automation, infrastructure as code, and integrating AI/LLMs into security workflows.

Highest-signal resume keywords

Security Engineering ExperiencePython ProficiencyInfrastructure As CodeCloud Security (Azure, GCP)Threat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PythonTerraformAI/LLM IntegrationVulnerability ManagementNetwork SecurityCI/CDSecure ConfigurationThreat ModelingSystem HardeningOperational Recovery

Soft Skills

Technical CommunicationCollaboration

Tools & Technologies

AzureGCPSIEM PlatformsFirewallsVPNsWeb Application FirewallsEndpoint ProtectionConfiguration ManagementGitLogging

Industry Keywords

Least PrivilegeDefense In DepthEncryptionSecrets ManagementTCP/IPDNSTLSRoutingSegmentationIntrusion Detection/Prevention

Tech Stack

Tools & technologies

AzureCloudDNSFirewallsGoogle Cloud PlatformLinuxPythonTCP/IPTerraform

About the role

Key responsibilities & impact

Design and operate security controls across systems, including secure configurations, identity controls, network segmentation, and logging
Build maintainable Python services, API integrations, and automation with testing, error handling, monitoring, and secure credential management
Develop AI/LLM-assisted security workflows and implement data protection, least-privilege access, and human approval for sensitive actions
Use Terraform or equivalent infrastructure-as-code tools and CI/CD pipelines to deploy repeatable, reviewable security infrastructure and detect configuration drift
Engineer and integrate firewalls, VPNs, web application firewalls, endpoint protection, vulnerability scanners, and SIEM platforms
Perform threat modeling and security design reviews, identify control gaps, and partner with service owners on remediation
Write and maintain architecture documentation, design decisions, runbooks, standard operating procedures, and operational handoff materials
Participate in engineering projects from requirements through production and review code and designs
Troubleshoot security services using logs, metrics, and network analysis; improve reliability and support an on-call rotation
Turn incidents and operational feedback into improvements through blameless postmortems, automated checks, and risk-reduction measurement
Automate firewall rule reviews, security tool configuration, vulnerability enrichment, and remediation workflows
Develop AI/LLM-assisted alert enrichment, investigation summaries, and documentation retrieval with evaluation, auditability, and human oversight
Create reusable infrastructure-as-code modules and deployment pipelines with security validation, drift detection, and rollback procedures
Improve security telemetry, service health monitoring, and operational runbooks

Requirements

What you’ll need

8+ years of security engineering experience
Hands-on experience securing and operating Azure and GCP environments, including cloud identity, networking, logging, and workload security
Proficiency in Python, including automation or integrations that have been built, tested, deployed, and supported
Practical experience integrating AI/LLMs into tools or workflows beyond conversational use
Understanding of AI/LLM limitations, evaluation needs, and security risks
Experience with infrastructure as code, version control, code review, and CI/CD
Knowledge of least privilege, defense in depth, secure configuration, vulnerability management, encryption, and secrets management
Knowledge of network security, including TCP/IP, DNS, TLS, routing, segmentation, firewalls, VPNs, web application firewalls, and intrusion detection/prevention
Experience with Terraform or equivalent, configuration management, Git, CI/CD, policy as code, and change control
Experience with threat modeling, secure design, vulnerability assessment, remediation prioritization, and system hardening
Linux, Mac, and Windows administration, troubleshooting, patching, availability, and operational recovery
Ability to communicate technical findings through architecture diagrams, design records, runbooks, procedures, knowledge transfer, and guidance for technical and nontechnical audiences
Ability to collaborate across security, IT, cloud, and development teams

Benefits

Comp & perks

Medical, dental, vision, health savings account or health reimbursement account
Healthcare spending accounts and dependent care spending accounts
Life and AD&D insurance
Disability insurance
401(k) with Company match
Tuition reimbursement
Charitable donation matching
Paid holidays and vacation
Paid sick time
Floating holidays
Compassion and bereavement leaves
Parental leave
Mental health and wellbeing programs
Fitness programs
Free and discounted games
Voluntary benefits including supplemental life and disability, legal service, ID protection, and rental insurance
Relocation assistance may be available if the Company requires geographic relocation
Incentive compensation may be available; not guaranteed