Security Engineer

Dizzion is seeking a proactive and technically capable Security Engineer to help protect our cloud infrastructure, customer environments, and internal systems. This role will be responsible for identifying and addressing security risks, supporting incident response, maintaining security controls, and helping ensure our environment remains secure, compliant, and resilient.

The Security Engineer will work closely with Engineering, Product, Support, Compliance, and Operations and will play an important role in translating security requirements into practical solutions. This is a hands-on role for someone who is comfortable working independently, takes ownership of security issues from identification through resolution, and communicates clearly along the way.

Given the nature of Dizzion's business and the customers we serve, this role requires strong attention to detail, sound judgment, and a disciplined approach to security procedures, SOPs, SLAs, documentation, and follow-through.

Responsibilities

Security Operations & Infrastructure

• Monitor and maintain security controls across Dizzion's cloud and corporate environments.
• Support the configuration and administration of security technologies including SIEM, firewalls, IDS/IPS, WAF, endpoint protection, vulnerability management, and identity and access management tools.
• Identify security gaps and proactively recommend improvements to strengthen Dizzion's security posture.
• Support infrastructure hardening and secure configuration initiatives across cloud and production environments.
• Partner with Engineering and IT to incorporate security best practices into infrastructure and application environments.

Incident Response & Threat Management

• Participate in the full incident response lifecycle, including detection, investigation, triage, containment, remediation, and recovery.
• Take ownership of security incidents and drive issues through resolution with appropriate urgency and escalation.
• Maintain and improve security incident response playbooks, SOPs, and runbooks.
• Perform root cause analysis and document corrective and preventative actions.
• Monitor emerging threats and assess their potential impact to Dizzion and its customers.
• Communicate clearly and consistently during security events, including status, impact, actions taken, and next steps.

Vulnerability & Risk Management

• Monitor vulnerability findings across infrastructure, applications, endpoints, and cloud environments.
• Evaluate and prioritize vulnerabilities based on severity, exploitability, business impact, and customer risk.
• Coordinate remediation efforts with Engineering, IT, and other internal teams.
• Track remediation against established SLAs and escalate risks when deadlines or requirements are not met.
• Maintain accurate documentation of vulnerabilities, remediation activities, exceptions, and risk acceptance.

Security Engineering & Automation

• Implement and improve security controls across cloud and corporate environments.
• Identify opportunities to automate repetitive security processes and improve operational efficiency.
• Develop scripts, tooling, and integrations that improve security monitoring, reporting, and response.
• Assist with security architecture reviews and secure implementation of new technologies.
• Evaluate security tools and technologies and make recommendations based on business and technical requirements.

Vendor & Platform Security Coordination

• Work closely with Omnissa on platform releases, security updates, vulnerabilities, and required remediation activities.
• Coordinate with internal teams to assess the security implications of platform and infrastructure changes.
• Partner with Product and Engineering to map security requirements and risks to the product roadmap.
• Support vendor security reviews and ensure security requirements are incorporated into technology evaluations and ongoing vendor relationships.
• Maintain clear documentation and follow-up on vendor-related security issues, commitments, and remediation timelines.

Compliance & Security Assurance

• Support Dizzion's security and compliance programs, including SOC 2, HIPAA, PCI-DSS, GDPR, and other applicable requirements.
• Help maintain security policies, procedures, evidence, and technical documentation required for audits and compliance activities.
• Support internal and external audits by providing accurate evidence and responding to technical requests.
• Identify gaps between security controls and compliance requirements and work with internal teams to address them.
• Help ensure security processes are consistently followed and documented.

Cross Functional Partnership

• Work closely with Engineering, Product, Support, Operations, Compliance, and other internal teams to identify and address security risks.
• Serve as a security resource for technical teams and provide practical guidance on secure design and implementation.
• Communicate technical security concepts clearly to both technical and non-technical stakeholders.
• Build strong working relationships across teams to ensure security issues are addressed quickly and effectively.
• Contribute to a culture of accountability, continuous improvement, and shared responsibility for security.