Talent.com
Sr. IT Security Engineer
Sr. IT Security Engineere.l.f. Beauty • Oakland, CA, US
Sr. IT Security Engineer

Sr. IT Security Engineer

e.l.f. Beauty • Oakland, CA, US
Hace más de 30 días
Tipo de contrato
  • A tiempo completo
Descripción del trabajo

Job Description

Job Description

About the Company

e.l.f. Beauty, Inc. stands with every eye, lip, face and paw. Our deep commitment to clean, cruelty free beauty at an incredible value has fueled the success of our flagship brand e.l.f. Cosmetics since 2004 and driven our portfolio expansion. Today, our multi-brand portfolio includes e.l.f. Cosmetics, e.l.f. SKIN, pioneering clean beauty brand Well People, Keys Soulcare, a groundbreaking lifestyle beauty brand created with Alicia Keys, Naturium, high-performance, biocompatible, clinically-effective and accessible skin care, and our newest brand, rhode, a line of curated skincare essentials, formulated for a variety of skin types and needs with high performance ingredients, it’s a daily routine that nourishes your skin barrier over time.

In our Fiscal year 25, we had net sales of $1 Billion and our business performance has been nothing short of extraordinary with 28 consecutive quarters of net sales growth. We are the #2 mass cosmetics brand in the US and are the fastest growing mass cosmetics brand among the top 5. Our total compensation philosophy offers every full-time new hire competitive pay and benefits, bonus eligibility (200% of target over the last six fiscal years), equity, flexible time off, year-round half-day Fridays, and a hybrid 3 day in office, 2 day at home work environment. We believe the combination of our unique culture, total compensation, workplace flexibility and care for the team is unmatched across not just beauty but any industry.

Visit our Career Page to learn more about our team : https : / / www.elfbeauty.com / work -with-us

Position Summary

We are seeking a highly skilled Senior Information Security Engineer to lead enterprise-wide cybersecurity initiatives and strengthen our security posture across on-premises and cloud environments. This role involves designing and implementing advanced security solutions, including Zero Trust, DLP, Cloud Security, Network Segmentation, IAM, and Security Automation. The ideal candidate will collaborate with cross-functional teams to identify risks, develop mitigation strategies, ensure regulatory compliance, and proactively defend against evolving threats while safeguarding our systems, data, and infrastructure.

Must Have

  • Strong Technical Security Foundation & Architecture

Deep knowledge of  network, cloud, and endpoint security .

Hands-on experience with  firewalls, SIEM tools (e.g., Splunk, Sentinel) ,  EDR / XDR ,  IAM , and  vulnerability management .

Understanding of  encryption, authentication, and secure architecture design .

  • Incident Response & Threat Management Skills
  • Ability to  detect, analyze, and respond  to security incidents effectively.

    Skilled in  log analysis, threat hunting, and forensics .

    Familiarity with  MITRE ATT&CK , common  attack techniques , and  SOC operations .

  • Risk Assessment & Communication
  • Strong ability to  assess vulnerabilities ,  prioritize risks , and  implement mitigations .

    Can  translate technical findings into business impact  and communicate clearly with both technical and non-technical teams.

    Understanding of  security frameworks and compliance standards  (NIST, ISO 27001, CIS).

    Responsibilities :

  • Design, build, deploy, and maintain enterprise security technologies and solutions aligned with business objectives, compliance requirements, and the cybersecurity program.
  • Develop, document, and enforce security policies, standards, and procedures based on frameworks such as NIST, CIS, ISO 27001, and SOX while advancing overall security maturity, governance, and processes.
  • Lead strategic security initiatives, including Zero Trust architecture, Data Loss Prevention (DLP), Cloud Security, Network Segmentation, IAM, Endpoint Security modernization, and security automation.
  • Manage and improve email security, DNS security, and other protective controls to defend against phishing, malware, data exfiltration, and domain-based threats.
  • Lead vulnerability management programs and drive remediation efforts, providing visibility into risks and progress to stakeholders.
  • Oversee incident response lifecycle—detection, analysis, containment, remediation, post-incident review—and continuously enhance disaster recovery and business continuity plans.
  • Monitor and analyze security events and network activity (e.g., traffic analysis, host behavior, forensics, kill chain, Windows event analysis), tuning tools, and event correlation for accurate threat detection.
  • Collaborate with IT, DevOps, and digital teams to embed security into system design, application development, deployment pipelines, and cloud infrastructure.
  • Evaluate and review vendor and partner security practices to ensure alignment with organizational standards.
  • Produce regular security dashboards and metrics to report on incidents, threats, and operational effectiveness.
  • Lead security awareness training, mentor junior engineers, and guide cross-functional teams on secure design principles and best practices.
  • Stay current on emerging threats, vulnerabilities, and technologies to enhance enterprise resilience.
  • Requirements :

  • Bachelor’s degree in Computer Science, Cybersecurity, or related field; Master’s preferred.
  • 7+ years of experience in information security engineering, architecture, or operations.
  • Expertise in cloud security (AWS, Azure, GCP), data protection, IAM / SSO / MFA, email and DNS security, and secure network architecture.
  • Hands-on experience with key security technologies : firewalls, VPN, NAC, EDR / MDR, IPS / IDS, SIEM, DLP, vulnerability management, and email security platforms (Proofpoint, Mimecast, Microsoft 365 Defender).
  • Strong understanding of Zero Trust, endpoint protection, DevSecOps, security automation, and scripting (Python, PowerShell, Bash).
  • Proven ability to lead incident response, risk assessments, threat detection, and remediation efforts.
  • Experience implementing DNS protection solutions (Cisco Umbrella, Cloudflare, Infoblox, Valimail).
  • Knowledge of security frameworks and compliance standards : NIST CSF, CIS Controls, ISO 27001, SOX.
  • Demonstrated success in leading security awareness programs, mentoring team members, and advancing security program maturity.
  • Relevant certifications preferred : CISSP, CISM, CISA, GIAC, Microsoft Security certifications, AWS Security Specialty, Azure Security Engineer Associate.
  • Strong communication, leadership, and ability to manage multiple security initiatives.
  • The base salary range for this role is listed above.

    Total compensation includes base salary, annual company-based performance bonus, and equity. Under e.l.f.’s annual bonus program, employees are eligible to earn up to 200% of their target bonus when company performance exceeds defined goals. In addition, e.l.f. provides a variety of other benefits to employees, including medical, dental, and vision insurance, a retirement savings plan, gender neutral parental leave, and unlimited paid time off. The amount of total compensation (including base salary) offered will be based on a wide range of factors, including geographic location, experience, specific skills, and qualifications.

    Compensation components are subject to change at the company’s discretion

    This job description is intended to describe the general nature and level of work being performed in this position. It also reflects the general details considered necessary to describe the principal functions of the job identified, and shall not be considered, as detailed description of all the work required inherent in the job. It is not an exhaustive list of responsibilities, and it is subject to changes and exceptions at the supervisors’ discretion.

    e.l.f. Beauty respects your privacy. Please see our Job Applicant Privacy Notice (www.elfbeauty.com / us -job-applicant-privacy-notice) for how your personal information is used and shared.

    We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

    Crear una alerta de empleo para esta búsqueda

    Sr IT Security Engineer • Oakland, CA, US

    Ofertas similares
    Senior IT Security & Infrastructure Engineer (Temporary)

    Senior IT Security & Infrastructure Engineer (Temporary)

    Vir Biotechnology, Inc. • San Francisco, California, United States
    A tiempo completo
    Senior Infrastructure & Security Engineer (Temporary).Senior Infrastructure & Security Engineer (Temporary).Senior Infrastructure & Security Engineer (Temporary). Be among the first 25 applicants Jo...Mostrar más
    Última actualización: hace 15 días • Oferta promocionada
    Sr. IT Security Engineer

    Sr. IT Security Engineer

    e.l.f. Beauty • Oakland, California, US
    A tiempo completo
    Job Description Job Description About the Company e.Our deep commitment to clean, cruelty free beauty at an incredible value has fueled the success of our flagship brand e.Cosmetics since 2004 a...Mostrar más
    Última actualización: hace 4 días • Oferta promocionada
    Autonomous IT Engineer - SaaS & Security Ops

    Autonomous IT Engineer - SaaS & Security Ops

    AirAngels • San Francisco, CA, United States
    Temporal
    A leading venture capital firm is seeking an IT Engineer for a 6-month contract in San Francisco.The ideal candidate will manage daily IT operations, troubleshoot issues, and support employee onboa...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Strategic Corporate Security Engineer

    Strategic Corporate Security Engineer

    Harvey • San Francisco, California, United States
    A tiempo completo
    A leading technology company in San Francisco is seeking a skilled IT Security Engineer to enhance its corporate security program. This role focuses on ensuring robust IT systems and compliance, req...Mostrar más
    Última actualización: hace 14 días • Oferta promocionada
    IT Engineer : Infra, Automation & Security

    IT Engineer : Infra, Automation & Security

    Langchain • San Francisco, CA, United States
    A tiempo completo
    A tech company based in San Francisco is seeking an IT Engineer to establish the IT foundation.This role involves building scalable infrastructure, driving automation efforts, and managing identity...Mostrar más
    Última actualización: hace 26 días • Oferta promocionada
    Information Security Engineer

    Information Security Engineer

    Irvine Technology Corporation • San Francisco, CA, United States
    A tiempo completo
    San Francisco, CA (Hybrid – 3 days on-site).Irvine Technology Corporation (ITC) – a leading provider of technology and staffing solutions. Security Operations & Incident Response.Assist with 24x7 se...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Security Engineer, Operating Systems

    Security Engineer, Operating Systems

    Anthropic • San Francisco, CA, United States
    A tiempo completo
    Security Engineer, Operating Systems.Join Anthropic as an Operating Systems Security Engineer to harden and secure the OS layer of our AI infrastructure. You will design and implement OS‑level secur...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    First IT Systems Engineer in SF - Zero-Trust & SSO

    First IT Systems Engineer in SF - Zero-Trust & SSO

    Braintrust Data, Inc. • San Francisco, CA, United States
    A tiempo completo
    A leading AI observability platform in San Francisco seeks a hands-on IT Systems Engineer to design, implement, and manage their IT infrastructure. This in-person role involves creating a zero-trust...Mostrar más
    Última actualización: hace 24 días • Oferta promocionada
    Security Engineer I

    Security Engineer I

    Gametime United • San Francisco, California, US
    A tiempo completo
    Job Description Job Description About Us : Live experiences help people cross today's digital divide and focus on what truly connects us - the here, the now, this once-in-a-lifetime moment that's ...Mostrar más
    Última actualización: hace 4 días • Oferta promocionada
    Senior Application Security Engineer (Secure-by-Default)

    Senior Application Security Engineer (Secure-by-Default)

    Pantera Capital • San Francisco, CA, United States
    A tiempo completo
    Pantera Capital is seeking an experienced Application Security Engineer to join their team in San Francisco.This pivotal role will focus on designing security solutions that foster innovation while...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Cyber Security Engineer - San Francisco

    Cyber Security Engineer - San Francisco

    Yeah! Global • San Francisco, CA, United States
    A tiempo completo
    About the job Cyber Security Engineer - San Francisco.Note : This job does not offer any Visa sponsorship.We are looking for applicants already living in the USA. Our client is seeking a highly skill...Mostrar más
    Última actualización: hace 15 días • Oferta promocionada
    Enterprise Security Engineer

    Enterprise Security Engineer

    OpenAI • San Francisco, CA, United States
    A tiempo completo
    Within the OpenAI Security organization, our IT team works to ensure our team of researchers, engineers, and staff have the tools they need to work comfortably, securely, and with minimal interrupt...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Infrastructure Engineer, Security San Francisco

    Infrastructure Engineer, Security San Francisco

    Thinking Machines Lab Inc. • San Francisco, CA, United States
    A tiempo completo
    Thinking Machines Lab's mission is to empower humanity through advancing collaborative general intelligence.We're building a future where everyone has access to the knowledge and tools to make AI w...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Senior Security Engineer

    Senior Security Engineer

    Metriport Inc. • San Francisco, California, United States
    A tiempo completo
    Senior Security Engineer San Francisco, CA.Metriport is an open-source data intelligence platform that helps healthcare organizations access and exchange patient data in real-time.We integrate with...Mostrar más
    Última actualización: hace 15 días • Oferta promocionada
    Sr. Security Engineer, Application Security

    Sr. Security Engineer, Application Security

    Amazon • San Francisco, CA, United States
    A tiempo completo
    Security Engineer, Application Security.In Amazon Stores, we ship some of the widest arrays of technology found at any company. As an AppSec engineer, you will collaborate with software development ...Mostrar más
    Última actualización: hace 16 días • Oferta promocionada
    Security Engineer : AI Infra Security, On-Site SF + Equity

    Security Engineer : AI Infra Security, On-Site SF + Equity

    Recruiting From Scratch • San Francisco, California, United States
    A tiempo completo
    A fast-growing AI infrastructure company in San Francisco is seeking a Security Engineer.You'll own the security function, design security controls, and respond to emerging threats.The ideal candid...Mostrar más
    Última actualización: hace 15 días • Oferta promocionada
    Senior Infrastructure & Security Engineer

    Senior Infrastructure & Security Engineer

    CDW • San Francisco, CA, United States
    Temporal
    Senior Infrastructure & Security Engineer.Your actual pay will be based on your skills and experience — talk with your recruiter to learn more. We can NOT provide sponsorship or work C2C.This is a 1...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Security Engineer, Operating Systems

    Security Engineer, Operating Systems

    Menlo Ventures • San Francisco, CA, United States
    A tiempo completo
    Anthropic’s mission is to create reliable, interpretable, and steerable AI systems.We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group ...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada