Sr. Cybersecurity Engineer

Sr. Cybersecurity Engineer WHO WE ARE Atlan is building the missing context layer for data and AI, helping enterprises close the AI value chasm. Today, 95% of AI pilots fail because AI systems don’t understand the context behind data: what it means, how it’s governed, and how it should be used. Atlan connects to every part of the modern data and AI stack to unify this context into a single, shared layer that both humans and AI agents can rely on. With Atlan, teams can discover, understand, and trust their data; build and collaborate on a shared body of knowledge; and activate that context across analytics, operations, and AI workflows.Trusted by global enterprises like Mastercard, Workday, General Motors, Unilever, Ralph Lauren, FOX, Nasdaq, and Medtronic, we’re backed by world-class investors including GIC, Insight Partners, Meritech, Peak XV, and Salesforce Ventures WHAT YOU WILL YOU DO At Atlan, we're a remote-first company where security is fundamental to everything we do. Our mission is to empower Atlan employees to work effectively and securely while protecting customer data and enabling business success. - Protect Our Remote-First Infrastructure: Design and maintain robust security controls across our network infrastructure, systems, and data assets tailored for our globally distributed workforce. - Remote Access Security: Secure remote access and deployment solutions (VPNs), including multi-factor authentication (MFA) and endpoint protection like MDM, ZTNA, SSO, RBAC, and fine-grained access controls. - Data Loss Prevention (DLP): Implement DLP solutions and strategies to protect sensitive customer and company data across cloud and remote work environments. - AI Security Governance: Govern internal AI tool usage (ChatGPT, Claude, etc.) by establishing secure guardrails through DLP controls, activity monitoring, and policy enforcement that protects intellectual property and confidential customer data. - Cloud Security Monitoring: Utilize cloud-specific security monitoring tools and techniques to detect and respond to threats, such as CSPM, WAF, and CWPP across our distributed infrastructure. - Email Security: Strengthen our email security posture to prevent phishing, malware, and data exfiltration—critical defenses for remote teams. - Compliance and Frameworks: Understand and implement compliance requirements, such as ISO 27001, ISO/IEC 42001, SOC 2, GDPR, HIPAA, etc. - Operational Excellence: Investigate and diagnose security incidents quickly and efficiently, coordinating with engineering teams or third-party vendors to resolve them. Modernize our security infrastructure by consolidating systems and refactoring legacy technical debt. - Strategic Decision-Making: Balance cost, security, compatibility, maintainability, and user experience when making decisions. - Industry Certifications: Leverage your security certifications (CISSP, CISM, CCSP, or similar) to enhance our security posture. WHAT MAKES YOU A GREAT MATCH - Remote Security Mindset: You understand the unique security challenges of remote-first organizations and have experience implementing security controls that protect distributed workforces without sacrificing productivity. You believe security exists to enable business success, not impede it. - Zero Trust Architecture: Experience designing and implementing security architectures based on Zero Trust Security principles—essential for remote-first environments. - Technical Mastery: Deep expertise in network protocols, cloud-based firewall management, VPNs, intrusion detection/prevention systems, load balancers, and vulnerability scanners. - Security Tools Proficiency: Familiarity with SIEM and SOAR systems, EDR, XDR tools, and data leak prevention (DLP) essential for securing remote access and collaboration. - Compliance Knowledge: Extensive knowledge of security frameworks such as NIST, ISO 27001, and ISO/IEC 42001 (AI management systems), and compliance standards such as GDPR, HIPAA, a ... (truncated, view full listing at source)