Senior Cybersecurity Engineer

Our team at Blackline Safety is growing! As a people-driven technology company, with a mission to make sure every worker returns home safely, we drive innovation, practice resiliency, demonstrate leadership, go the extra mile for our customers, and empower our people to be their best.The Senior Cybersecurity Engineer will provide technical leadership across these environments while working alongside dedicated cybersecurity specialists, including Cybersecurity Operations, Application Security, and Governance, Risk & Compliance (GRC) resources.Reporting to the Vice President, Business Information Technology & Cybersecurity, this position will serve as the senior technical cybersecurity resource within the team and will work across Blackline Safety's global technology environment.The successful candidate will be highly technical, comfortable operating across multiple security domains, capable of influencing teams outside of their reporting structure, and interested in developing into broader cybersecurity leadership.Key Responsibilities
Senior Cybersecurity Engineering
Design and implement controls, architecture patterns, technical standards, and configuration baselines across complex enterprise environments.Lead complex investigations, security initiatives, proof-of-concepts, and technical implementations.Identify systemic weaknesses, recommend practical solutions, and evaluate security technologies.Troubleshoot issues spanning multiple systems and serve as an escalation point for cybersecurity and technology teams.Translate cybersecurity strategy into executable initiatives and transition new capabilities into operations.Automate security enrichment, investigation, remediation, reporting, validation, and guardrails.Develop scripts and integrations using PowerShell, Python, Microsoft Graph, AWS and GitHub APIs, REST APIs, and other appropriate tools.Integrate preventative controls into technology deployment processes.
Cloud Security
Review cloud architecture, IAM, privileged access, network exposure, encryption, secrets, certificates, and key management.Assess logging, monitoring, CSPM/CNAPP, infrastructure-as-code, and automated deployment controls.Identify misconfigurations and insecure patterns, support investigations, and work with Cloud Engineering and Software teams to implement preventative controls.
Identity & Access Security
Conditional Access, identity protection, phishing-resistant authentication, and federation/SSO.Privileged access, just-in-time administration, PIM, role-based access, and least privilege.Service accounts, non-human identities, Active Directory hardening, and identity attack-path reduction.
Infrastructure & Network Security
Firewall architecture, segmentation, NAC, SASE/ZTNA, secure remote access, and administrative controls.Infrastructure monitoring and security configuration standards.
Vulnerability & Exposure Management
Validate and prioritize vulnerabilities based on exploitability, exposure, asset criticality, threat intelligence, and compensating controls.Identify attack paths and recurring weaknesses, develop remediation strategies with technical owners, and validate corrective action.Analyze penetration-test findings and improve visibility of the enterprise attack surface.Help the organization understand and reduce meaningful technical exposure.
Cybersecurity Operations & Incident Response
Lead or support complex investigations, technical escalation, threat hunting, containment, remediation, and root-cause analysis.Improve detection engineering, incident-response playbooks, tabletop exercises, and post-incident controls.Provide technical leadership during significant cybersecurity incidents.
Technical Leadership
Mentor cybersecurity team members and provide guidance without becoming a bottleneck.Review technical designs, establish engineering standards, and help prioritize cybersecurity initiatives.Lead cross-functional initiatives and represent Cybersecurity in architecture and project discussions.Build strong relationships with technical stakeholders and engage specialist expertise when needed.Delegate effectively and foster a culture of partnership, accountability, and continuous improvement.
About You
Minimum 7 years of progressive cybersecurity or related technical experience, including significant hands‑on engineering work.Broad knowledge of enterprise security architecture, Microsoft technologies, Active Directory, Entra ID, public cloud, identity, endpoint, infrastructure, and network security.Experience with vulnerability and exposure management, incident response, monitoring and detection, and application-security or DevSecOps principles.Working knowledge of security automation, scripting, APIs, attacker techniques, and enterprise attack paths.Ability to analyze complex environments, identify meaningful risk, and influence technical decisions across organizational boundaries.Strong communication skills and demonstrated ability to mentor technical professionals.Strong candidates will have experience across several of the following areas:
Microsoft: Entra ID, Active Directory, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Intune, Purview, Azure.Cloud: AWS, Azure, IAM, cloud networking, CSPM/CNAPP, cloud logging, workload security, containers, infrastructure-as-code.Infrastructure: Windows security, network security, firewalls, segmentation, SASE, ZTNA, NAC, PKI, privileged access.Security Operations: SIEM, EDR/XDR, MDR, detection engineering, threat hunting, incident response, forensic investigation.Exposure Management: vulnerability management, penetration testing, attack-path analysis, security validation, configuration assessment.Development Security: GitHub, secure SDLC, SAST, DAST, SCA, secrets scanning, CI/CD security, threat modeling and software supply‑chain security.Automation: PowerShell, Python, Microsoft Graph, REST APIs, AWS APIs and security orchestration.Governance: CIS Controls, NIST CSF, ISO/IEC 27001, SOC 2 and related cybersecurity frameworks.
Total Rewards
At Blackline Safety, we offer more than just a job—we offer a career with purpose. Our Total Rewardsofferings are designed to supportthe diverse needs of our global workforce and vary based onemployment type and location.They mayinclude:Competitive base salary and annual compensation reviewComprehensive health and dental benefits*Mental health and wellness supportFlexible work arrangements and hybrid work model for eligible positionsPaid vacation, personal and sick days*Professional development opportunitiesEducation fundingA collaborative, inclusive, and mission-driven cultureExclusive access toperksand discountsAflexible ‘DressforYour Day’ environment*Eligibility and coverage vary by employment type and region.Diversity, Equity & Inclusion
Blackline Safety is powered by the diversity of our talented employees. We are an equal opportunity employer. We consider all applicants, regardless of age, religion, race, color, ancestry, gender, gender identity or expression, disability, national origin, race, or sexual orientation. We enthusiastically encourage all individuals to apply for positions that fit their passions.If you require accommodation during the recruitment process, pleasecontact us View email address on ca.hrm.tc. We are committed to ensuring an accessible and equitable experience for all candidates.Join Us
Ifyou’repassionate about technology, safety, and making a difference,we’dlove to hear from you.UnauthorizedRecruitmentCommunicationAlert
We are aware of the instances in which individuals are receiving fraudulent job offers or interview requests that are fraudulently alleged to be from Blackline Safety.Blackline Safety does not request payment or personal financial information at any stage of the recruitment process.Please exercise caution, and do not respond to emails or other communications that are not from a Blackline Safety email address.
#J-18808-Ljbffr