Security Engineer
robert halfLos Angeles (CA)
Security Engineer
Posted 2 days ago
robert halfLos Angeles (CA)
SENIORITY
Lead
About the role
Security Engineer
Overview:
A leading global professional services organization is seeking a Security Engineer with Third-Party Risk experience. The Security Engineer plays a critical role in safeguarding the organization's ecosystem by evaluating the security posture of external vendors and partners. This role focuses on conducting technical risk assessments across SaaS platforms, cloud environments, and hosted services while ensuring compliance with industry standards and client expectations. Based remotely, this position partners closely with IT security leadership and cross-functional stakeholders to mitigate risk and strengthen third-party security practices.
Key Responsibilities:
- Conduct technical security assessments of third-party vendors across SaaS platforms, cloud infrastructure, and hosted services
- Evaluate vendor security controls, including access management, encryption, and data protection practices
- Review vendor documentation such as SOC 2 reports, ISO certifications, and security testing results
- Assess cloud environments (AWS, Azure, GCP) for security configurations, segmentation, and identity controls
- Analyze API security, including authentication methods, data transmission, and vulnerability risks
- Evaluate DevSecOps maturity, including secure development practices and CI/CD pipeline security
- Track and manage vendor risk findings, ensuring remediation efforts are completed in a timely manner
- Support client-facing security activities, including questionnaires, audits, and compliance reviews
- Collaborate with internal stakeholders to align vendor security with regulatory requirements (e.g., GDPR, CCPA)
- Prepare risk reports and present key findings to leadership and cross-functional teams
Additional Details:
- Remote (must reside in proximity to a supported office region)
- Core hours: 8:00 AM – 4:00 PM PT (7-hour workday)
- Occasional travel may be required for vendor assessments
- Collaborative environment with direct exposure to senior leadership and security stakeholders
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.