Senior Security Engineer

Picarro is seeking a Senior Security Engineer who will be crucial in upholding our ISO 27001 certification and managing various aspects of our security and compliance framework. As a key member of the Picarro IT team, you will drive continuous improvement of network security workflows and processes through automation and innovation. Reporting to the Senior Director, Business Systems, the position will provide and own network security strategies to advance Picarro in detecting and preventing any security threats. This employee will support the growth of security services for our global workplace systems, which include computing systems (Windows, Macs, Linux, mobile devices), networks, AWS, and the M365 environment. The position will also support new IT projects and implementations by working with end–users, x–functional teams, 3rd party vendors, and consultants to ensure the success of these projects.

You will:

• Evaluate and propose best practices/standards, process improvements, and security policies to provide the highest availability, security, and data privacy levels.
• ISO Certifications Maintenance: Actively maintain ISO 27001 certification, regularly update policies, and ensure compliance through tools.
• Security Incident Management: Systematically record all security incidents detected through monitoring tools or reported by users, aligning with our established security policies.
• Vendor Security Assessments: Conduct detailed security assessments of vendors, reviewing SOC2 documentation and other relevant security credentials to ensure alignment with our security standards.
• Function as SME and trusted network security advisor to review and assess technologies and process gaps, technology requests, compliance, and evidence gathering.
• Provide IT support services to our users onsite and remotely when needed. Help administer Microsoft 365, Sophos Central, Phishing campaigns, Okta, SaaS, IT HW support, VPN, Wi–Fi, network infra, etc.
• Assist engineering teams with development system configurations.
• Demonstrated experience understanding complex issues and explaining them in terms appropriate for technical or nontechnical audiences.
• Ability to collaborate effectively with cross–functional teams, including IT, HR, and business units, to align initiatives with organizational goals and security objectives.
• Effective communication skills, both written and verbal, with the ability to convey complex security and information.

• Bachelor's degree in engineering, computer science, or related field from an accredited college or university.
• You have 10+ years of experience supporting and deploying Windows, MacOS, and Linux systems.
• Familiar with requirements and security frameworks such as NIST CSF, ISO27001, or SOC2.
• Professional certifications such as CISSP, CISM, GSEC, GIAC, CEH, and CPT are preferred.
• Expert knowledge of AWS, Network Security Management, design, and deployment.
• Hands–on experience with FortiGate, Ruckus, MDM, cloud services, and platforms such as Entra, and AWS. Virtual computing infrastructure platforms such as VMware, etc.
• Strong knowledge and experience with tools, platforms, and protocols such as TCP/IP, UDP, DNS, SMTP, SNMP, VPN, Active Directory, Entra, and Windows Server.
• Understanding various security technologies including endpoint, network security, e–mail security, SIEM, etc.
• Experience with one or more programming or scripting languages such as PowerShell, Python, or others.
• Maintaining, updating, and creating accurate documentation and procedures for IT processes.
• Experience with configuration and management of SaaS solutions such as M365, Okta, Atera, Zoom Meeting, Zoom Phone, MS Teams, Slack, Veeam.
• Providing technical support and solutions for company employees by monitoring and responding quickly and effectively to requests received through IT tickets, prioritizing issues with a security–first mindset.
• Commit to excellent customer service; anticipate, meet, and exceed expectations by solving problems quickly and effectively, prioritizing customer issues.
• Provide hands–on and remote support and diagnose technical issues across many platforms.
• Strong customer service, problem–solving, and teamwork abilities.
• Ability to provide after–hours support as needed.

The base salary range for this full–time position is $150,000 – $175,000.00 USD annually plus bonus and equity. Your base salary and title will be determined based on the location, experience, qualifications, skills, knowledge, level, and pay of employees in similar positions.

• Medical, Dental, and Vision insurance
• Flexible Spending Account (FSA) and Health Savings Account (HSA) plans
• Life, Short–Term Disability, and Long–Term Disability Insurance
• Paid Time Off and Paid Holidays
• Employee Referral Program
• 401K
• Social events (summer picnic, holiday party, team lunches, etc.)
• On–site Health & Wellness programs (fitness challenges, outdoor boot camp, flu shots, etc.)

We are the world's leader in timely, trusted, and actionable data using enhanced optical spectroscopy. Our solutions are used in various applications, including natural gas leak detection, ethylene oxide emissions monitoring, semiconductor fabrication, pharmaceutical, petrochemical, atmospheric science, air quality, greenhouse gas measurements, food safety, hydrology, ecology, and more. Our software and hardware are designed and manufactured in Santa Clara, California. They are used in over 90 countries worldwide based on over 65 patents related to cavity ring–down spectroscopy (CRDS) technology. They are unparalleled in their precision, ease of use, and reliability.

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, gender identity, social orientation, nor on the basis of disability. Posted positions are not open to third–party recruiters/agencies, and unsolicited resume submissions will be considered free referrals.

If you are an individual with a disability and require reasonable accommodation to complete any part of the application process or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact Picarro, Inc. at for assistance.