Our team at Blackline Safety is growing! As a people-driven technology company, with a mission to make sure every worker returns home safely, we drive innovation, practice resiliency, demonstrate leadership, go the extra mile for our customers, and empower our people to be their best.

The Senior Cybersecurity Engineer will provide technical leadership across these environments while working alongside dedicated cybersecurity specialists, including Cybersecurity Operations, Application Security, and Governance, Risk & Compliance (GRC) resources.

Reporting to the Vice President, Business Information Technology & Cybersecurity, this position will serve as the senior technical cybersecurity resource within the team and will work across Blackline Safety's global technology environment.

The successful candidate will be highly technical, comfortable operating across multiple security domains, capable of influencing teams outside of their reporting structure, and interested in developing into broader cybersecurity leadership.

Key Responsibilities

• Senior Cybersecurity Engineering
• Design and implement controls, architecture patterns, technical standards, and configuration baselines across complex enterprise environments.
• Lead complex investigations, security initiatives, proof-of-concepts, and technical implementations.
• Identify systemic weaknesses, recommend practical solutions, and evaluate security technologies.
• Troubleshoot issues spanning multiple systems and serve as an escalation point for cybersecurity and technology teams.
• Translate cybersecurity strategy into executable initiatives and transition new capabilities into operations.
• Automate security enrichment, investigation, remediation, reporting, validation, and guardrails.
• Develop scripts and integrations using PowerShell, Python, Microsoft Graph, AWS and GitHub APIs, REST APIs, and other appropriate tools.
• Integrate preventative controls into technology deployment processes.
• Cloud Security
• Review cloud architecture, IAM, privileged access, network exposure, encryption, secrets, certificates, and key management.
• Assess logging, monitoring, CSPM/CNAPP, infrastructure-as-code, and automated deployment controls.
• Identify misconfigurations and insecure patterns, support investigations, and work with Cloud Engineering and Software teams to implement preventative controls.
• Identity & Access Security
• Conditional Access, identity protection, phishing-resistant authentication, and federation/SSO.
• Privileged access, just-in-time administration, PIM, role-based access, and least privilege.
• Service accounts, non-human identities, Active Directory hardening, and identity attack-path reduction.
• Infrastructure & Network Security
• Firewall architecture, segmentation, NAC, SASE/ZTNA, secure remote access, and administrative controls.
• Infrastructure monitoring and security configuration standards.
• Vulnerability & Exposure Management
• Validate and prioritize vulnerabilities based on exploitability, exposure, asset criticality, threat intelligence, and compensating controls.
• Identify attack paths and recurring weaknesses, develop remediation strategies with technical owners, and validate corrective action.
• Analyze penetration-test findings and improve visibility of the enterprise attack surface.
• Help the organization understand and reduce meaningful technical exposure.
• Cybersecurity Operations & Incident Response
• Lead or support complex investigations, technical escalation, threat hunting, containment, remediation, and root-cause analysis.
• Improve detection engineering, incident-response playbooks, tabletop exercises, and post-incident controls.
• Provide technical leadership during significant cybersecurity incidents.
• Technical Leadership
• Mentor cybersecurity team members and provide guidance without becoming a bottleneck.
• Review technical designs, establish engineering standards, and help prioritize cybersecurity initiatives.
• Lead cross-functional initiatives and represent Cybersecurity in architecture and project discussions.
• Build strong relationships with technical stakeholders and engage specialist expertise when needed.
• Delegate effectively and foster a culture of partnership, accountability, and continuous improvement.

About You  

• Minimum 7 years of progressive cybersecurity or related technical experience, including significant hands-on engineering work.
• Broad knowledge of enterprise security architecture, Microsoft technologies, Active Directory, Entra ID, public cloud, identity, endpoint, infrastructure, and network security.
• Experience with vulnerability and exposure management, incident response, monitoring and detection, and application-security or DevSecOps principles.
• Working knowledge of security automation, scripting, APIs, attacker techniques, and enterprise attack paths.
• Ability to analyze complex environments, identify meaningful risk, and influence technical decisions across organizational boundaries.
• Strong communication skills and demonstrated ability to mentor technical professionals.
• Strong candidates will have experience across several of the following areas:
• Microsoft: Entra ID, Active Directory, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, Intune, Purview, Azure.
• Cloud: AWS, Azure, IAM, cloud networking, CSPM/CNAPP, cloud logging, workload security, containers, infrastructure-as-code.
• Infrastructure: Windows security, network security, firewalls, segmentation, SASE, ZTNA, NAC, PKI, privileged access.
• Security Operations: SIEM, EDR/XDR, MDR, detection engineering, threat hunting, incident response, forensic investigation.
• Exposure Management: vulnerability management, penetration testing, attack-path analysis, security validation, configuration assessment.
• Development Security: GitHub, secure SDLC, SAST, DAST, SCA, secrets scanning, CI/CD security, threat modeling and software supply-chain security.
• Automation: PowerShell, Python, Microsoft Graph, REST APIs, AWS APIs and security orchestration.
• Governance: CIS Controls, NIST CSF, ISO/IEC 27001, SOC 2 and related cybersecurity frameworks.

Total Rewards 

At Blackline Safety, we offer more than just a job—we offer a career with purpose. Our Total Rewards offerings are designed to support the diverse needs of our global workforce and vary based on employment type and location. They may include: 

• Competitive base salary and annual compensation review 
• Comprehensive health and dental benefits* 
• Mental health and wellness support 
• Flexible work arrangements and hybrid work model for eligible positions 
• Paid vacation, personal and sick days* 
• Professional development opportunities 
• Education funding  
• A collaborative, inclusive, and mission-driven culture  
• Exclusive access to perks and discounts 
• A flexible ‘Dress for Your Day’ environment 

*Eligibility and coverage vary by employment type and region.  

Diversity, Equity & Inclusion 

Blackline Safety is powered by the diversity of our talented employees. We are an equal opportunity employer. We consider all applicants, regardless of age, religion, race, color, ancestry, gender, gender identity or expression, disability, national origin, race, or sexual orientation. We enthusiastically encourage all individuals to apply for positions that fit their passions.

If you require accommodation during the recruitment process, please contact us at [email protected]. We are committed to ensuring an accessible and equitable experience for all candidates. 

Join Us 

If you’re passionate about technology, safety, and making a difference, we’d love to hear from you. Apply today and help us build a safer, more connected world. 

Unauthorized Recruitment Communication Alert  

We are aware of the instances in which individuals are receiving fraudulent job offers or interview requests that are fraudulently alleged to be from Blackline Safety.

Blackline Safety does not request payment or personal financial information at any stage of the recruitment process.

Please exercise caution, and do not respond to emails or other communications that are not from a Blackline Safety email address.