Sr Enterprise Security Engineer

The Team:

Within our InfoSec organization, Our global security engineering team is responsible for designing, building, and enhancing the underlying security components that help with securing the Celonis Application and Platforms stacks. We think about both offensively and defensively. We continuously monitor our global security posture and are always adapting to the ever-changing threat landscape. The security engineering team is looking for talented subject matter experts in application, platform and offensive security.

The Role:

The Enterprise Security Engineer is a hands-on technical role responsible for designing, implementing, and maintaining the security infrastructure across the organization. In this role you will ensure that enterprise systems, networks, and data are protected against cyber threats and that compliance requirements are consistently met. You will collaborate with IT, compliance, and business units to implement security best practices and respond to incidents effectively.

The work you’ll do:

• Experience with designing and implementing zero trust policies using tools like ZScaler, Cloudflare, etc.
• Design and implement enterprise-level security solutions, including firewalls, IDS/IPS, endpoint protection, DLP, SIEM, and encryption.
• Conduct risk assessments and vulnerability assessments; recommend mitigation strategies.
• Ensure compliance with regulatory frameworks (e.g., ISO 27001, NIST, GDPR, HIPAA, PCI-DSS, FedRAMP).
• Develop and maintain security policies, standards, and procedures.
• Evaluate and recommend new security tools and technologies.
• Collaborate with IT and DevOps teams to integrate security into system architecture and CI/CD pipelines.
• Perform regular audits, penetration tests, and security assessments.
• Provide training and awareness on security topics to employees.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• 5+ years of experience in cybersecurity, with at least 2 years in enterprise environments.
• Strong knowledge of network, system, and cloud security.
• Experience with tools such as Splunk, Fortinet, Salesforce, ServiceNow, CrowdStrike, Tenable, etc.
• Certifications such as CISSP, CISM, CEH, or GIAC are a plus.
• Identity and Access Management
• Automation and Tooling
• Vulnerability Management 
• Extensive knowledge of Cloud Security with AWS, Azure, and GCP. 

Preferred Qualifications:

• Excellent problem-solving and analytical skills.
• Strong communication and documentation abilities.
• Ability to work independently and as part of a cross-functional team.
• Infrastructure As Code (ie: Terraform)

Visa sponsorship is not offered for this role.