Security Engineer - Corporate Security

Bitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. Companies rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss. Built on over a decade of technological innovation, its integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance, and data analysis.We invented the cyber ratings industry in 2011Over 3000 customers trust BitsightOver 750 teammates are dispersed throughout Boston, Raleigh, New York, Lisbon, Singapore, and remoteWe are looking for a skilled and passionate Cybersecurity Engineer to strengthen and scale our security capabilities in response to an evolving threat landscape. In this role, you will have the opportunity to shape our security strategy, drive the implementation of cutting-edge security technologies, and establish proactive defense mechanisms to safeguard our company and employees' data. As a subject matter expert, you will work with industry-leading security platforms, define preventative measures, and contribute to a culture of security excellence.BitSight is transforming how companies manage information security risk with objective, verifiable, and actionable Security Ratings. BitSight’s platform continuously analyzes vast amounts of external data on security issues and behaviors to help organizations manage third-party risk, underwrite cyber insurance policies, benchmark performance, conduct M&A due diligence, and assess aggregate risk. Fifty percent of the world’s cyber insurance premiums are underwritten by BitSight customers, all four of the Big 4 accounting firms use BitSight, and four of the top five investment banks rely on our solution to manage cyber risks.Key Responsibilities:Develop and enhance security strategies to protect against emerging threats.Deploy and manage SIEM, EDR, and cloud security technologies to monitor and respond to incidents effectively.Lead or participate in security incident handling and response, including SOC operations and DFIR.Enforce least privilege access principles and secure network architectures.Support AI governance initiatives, including evaluating AI security risks, contributing to AI usage policies, and implementing controls for AI tools and integrations used across the organization.Work autonomously while also thriving in a collaborative team environment.Utilize defense-in-depth methodology to enhance and sustain a secure environment.Required Qualifications:4+ years of experience in dedicated information security roles.Hands-on experience with SIEM and EDR solutions.Expertise in security incident response and SOC operations.Strong knowledge of least access principles and defense-in-depth methodologies.Solid understanding of TCP/IP networking and security protocols.Understanding of AWS cloud environments and working with related security technologies.Excellent verbal and written communication skills, with the ability to engage technical, non-technical, and executive audiences.Preferred Qualifications:Experience with vulnerability management, assessment, and remediation.Familiarity with adversarial TTPs and attack frameworks (MITRE ATT&CK, etc.).Knowledge of AI/LLM security risks, including prompt injection, model misuse, data exposure, and agentic AI threats.Experience evaluating or implementing AI governance and security controls (e.g., MCP gateways, AI access policies, behavioral monitoring for AI tools).Knowledge of security compliance frameworks (e.g., SOC 2, CIS, NIST 800 series, ISO 27001).Experience with detection engineering tools (e.g., Suricata, YARA, Sigma).Proficiency in Python for security automation, including threat detection and compliance workflows.Preferred Certifications:AWS Certified Security SpecialtySANS Certifications: GCIA, GCIH, GCFA, GCTIISC2: CISSP or CCSPCompTIA Security+Belonging & Inclusion. Bitsight is proud to be an equal opportunity employer. This means we do not tolerate discrimination of any kind and are committed to providing equal employment opportunities regardless of your gender identity, race, nationality, religion, sexual orientation, status as a protected veteran, or status as an individual with a disability.Culture. We put our people first. Bitsight offers best in class benefits. We devote the same energy to nurturing our company's inclusive culture as we apply to serving our customers' needs. Working at Bitsight will give you the opportunity to fulfill your professional goals and expand your skills.Open-minded. If you got to this point, we hope you’re feeling excited about the job description you just read. Even if you don’t feel that you meet every single requirement, we still encourage you to apply. We’re eager to meet people that believe in Bitsight’s mission and can contribute to our team in a variety of ways.Bitsight also provides reasonable