Talent.com
Sr. IT Security Engineer
Sr. IT Security Engineere.l.f. Beauty • Oakland, CA, US
Sr. IT Security Engineer

Sr. IT Security Engineer

e.l.f. Beauty • Oakland, CA, US
30+ days ago
Job type
  • Full-time
Job description

Job Description

Job Description

About the Company

e.l.f. Beauty, Inc. stands with every eye, lip, face and paw. Our deep commitment to clean, cruelty free beauty at an incredible value has fueled the success of our flagship brand e.l.f. Cosmetics since 2004 and driven our portfolio expansion. Today, our multi-brand portfolio includes e.l.f. Cosmetics, e.l.f. SKIN, pioneering clean beauty brand Well People, Keys Soulcare, a groundbreaking lifestyle beauty brand created with Alicia Keys, Naturium, high-performance, biocompatible, clinically-effective and accessible skin care, and our newest brand, rhode, a line of curated skincare essentials, formulated for a variety of skin types and needs with high performance ingredients, it’s a daily routine that nourishes your skin barrier over time.

In our Fiscal year 25, we had net sales of $1 Billion and our business performance has been nothing short of extraordinary with 27 consecutive quarters of net sales growth. We are the #2 mass cosmetics brand in the US and are the fastest growing mass cosmetics brand among the top 5. Our total compensation philosophy offers every full-time new hire competitive pay and benefits, bonus eligibility (200% of target over the last six fiscal years), equity, flexible time off, year-round half-day Fridays, and a hybrid 3 day in office, 2 day at home work environment. We believe the combination of our unique culture, total compensation, workplace flexibility and care for the team is unmatched across not just beauty but any industry.

Visit our Career Page to learn more about our team : https : / / www.elfbeauty.com / work -with-us

Position Summary

We are seeking a highly skilled Senior Information Security Engineer to lead enterprise-wide cybersecurity initiatives and strengthen our security posture across on-premises and cloud environments. This role involves designing and implementing advanced security solutions, including Zero Trust, DLP, Cloud Security, Network Segmentation, IAM, and Security Automation. The ideal candidate will collaborate with cross-functional teams to identify risks, develop mitigation strategies, ensure regulatory compliance, and proactively defend against evolving threats while safeguarding our systems, data, and infrastructure.

Must Have

  • Strong Technical Security Foundation & Architecture

Deep knowledge of  network, cloud, and endpoint security .

Hands-on experience with  firewalls, SIEM tools (e.g., Splunk, Sentinel) ,  EDR / XDR ,  IAM , and  vulnerability management .

Understanding of  encryption, authentication, and secure architecture design .

  • Incident Response & Threat Management Skills
  • Ability to  detect, analyze, and respond  to security incidents effectively.

    Skilled in  log analysis, threat hunting, and forensics .

    Familiarity with  MITRE ATT&CK , common  attack techniques , and  SOC operations .

  • Risk Assessment & Communication
  • Strong ability to  assess vulnerabilities ,  prioritize risks , and  implement mitigations .

    Can  translate technical findings into business impact  and communicate clearly with both technical and non-technical teams.

    Understanding of  security frameworks and compliance standards  (NIST, ISO 27001, CIS).

    Responsibilities :

  • Design, build, deploy, and maintain enterprise security technologies and solutions aligned with business objectives, compliance requirements, and the cybersecurity program.
  • Develop, document, and enforce security policies, standards, and procedures based on frameworks such as NIST, CIS, ISO 27001, and SOX while advancing overall security maturity, governance, and processes.
  • Lead strategic security initiatives, including Zero Trust architecture, Data Loss Prevention (DLP), Cloud Security, Network Segmentation, IAM, Endpoint Security modernization, and security automation.
  • Manage and improve email security, DNS security, and other protective controls to defend against phishing, malware, data exfiltration, and domain-based threats.
  • Lead vulnerability management programs and drive remediation efforts, providing visibility into risks and progress to stakeholders.
  • Oversee incident response lifecycle—detection, analysis, containment, remediation, post-incident review—and continuously enhance disaster recovery and business continuity plans.
  • Monitor and analyze security events and network activity (e.g., traffic analysis, host behavior, forensics, kill chain, Windows event analysis), tuning tools, and event correlation for accurate threat detection.
  • Collaborate with IT, DevOps, and digital teams to embed security into system design, application development, deployment pipelines, and cloud infrastructure.
  • Evaluate and review vendor and partner security practices to ensure alignment with organizational standards.
  • Produce regular security dashboards and metrics to report on incidents, threats, and operational effectiveness.
  • Lead security awareness training, mentor junior engineers, and guide cross-functional teams on secure design principles and best practices.
  • Stay current on emerging threats, vulnerabilities, and technologies to enhance enterprise resilience.
  • Requirements :

  • Bachelor’s degree in Computer Science, Cybersecurity, or related field; Master’s preferred.
  • 7+ years of experience in information security engineering, architecture, or operations.
  • Expertise in cloud security (AWS, Azure, GCP), data protection, IAM / SSO / MFA, email and DNS security, and secure network architecture.
  • Hands-on experience with key security technologies : firewalls, VPN, NAC, EDR / MDR, IPS / IDS, SIEM, DLP, vulnerability management, and email security platforms (Proofpoint, Mimecast, Microsoft 365 Defender).
  • Strong understanding of Zero Trust, endpoint protection, DevSecOps, security automation, and scripting (Python, PowerShell, Bash).
  • Proven ability to lead incident response, risk assessments, threat detection, and remediation efforts.
  • Experience implementing DNS protection solutions (Cisco Umbrella, Cloudflare, Infoblox, Valimail).
  • Knowledge of security frameworks and compliance standards : NIST CSF, CIS Controls, ISO 27001, SOX.
  • Demonstrated success in leading security awareness programs, mentoring team members, and advancing security program maturity.
  • Relevant certifications preferred : CISSP, CISM, CISA, GIAC, Microsoft Security certifications, AWS Security Specialty, Azure Security Engineer Associate.
  • Strong communication, leadership, and ability to manage multiple security initiatives.
  • The base salary range for this role is listed above.

    Total compensation includes base salary, annual company-based performance bonus, and equity. Under e.l.f.’s annual bonus program, employees are eligible to earn up to 200% of their target bonus when company performance exceeds defined goals. In addition, e.l.f. provides a variety of other benefits to employees, including medical, dental, and vision insurance, a retirement savings plan, gender neutral parental leave, and unlimited paid time off. The amount of total compensation (including base salary) offered will be based on a wide range of factors, including geographic location, experience, specific skills, and qualifications.

    Compensation components are subject to change at the company’s discretion

    This job description is intended to describe the general nature and level of work being performed in this position. It also reflects the general details considered necessary to describe the principal functions of the job identified, and shall not be considered, as detailed description of all the work required inherent in the job. It is not an exhaustive list of responsibilities, and it is subject to changes and exceptions at the supervisors’ discretion.

    e.l.f. Beauty respects your privacy. Please see our Job Applicant Privacy Notice (www.elfbeauty.com / us -job-applicant-privacy-notice) for how your personal information is used and shared.

    We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

    Create a job alert for this search

    Sr IT Security Engineer • Oakland, CA, US

    Similar jobs
    Security Engineer

    Security Engineer

    TSR Consulting • San Francisco, CA, United States
    Full-time
    Role Overview : We are seeking a skilled Key Management Engineer to join our team, with expertise in the architecture and tools for both symmetric and asymmetric key management, including Public Key...Show more
    Last updated: 4 days ago • Promoted
    Senior Security Engineer — Corporate Security (Equity)

    Senior Security Engineer — Corporate Security (Equity)

    Rippling • San Francisco, CA, United States
    Full-time
    A leading HR and IT solutions firm is seeking a Senior Security Engineer to join their Corporate Security team in San Francisco. This role involves leading security projects, designing access contro...Show more
    Last updated: 30+ days ago • Promoted
    Autonomous IT Engineer - SaaS & Security Ops

    Autonomous IT Engineer - SaaS & Security Ops

    AirAngels • San Francisco, CA, United States
    Temporary
    A leading venture capital firm is seeking an IT Engineer for a 6-month contract in San Francisco.The ideal candidate will manage daily IT operations, troubleshoot issues, and support employee onboa...Show more
    Last updated: 30+ days ago • Promoted
    IT Engineer : Infra, Automation & Security

    IT Engineer : Infra, Automation & Security

    Langchain • San Francisco, CA, United States
    Full-time
    A tech company based in San Francisco is seeking an IT Engineer to establish the IT foundation.This role involves building scalable infrastructure, driving automation efforts, and managing identity...Show more
    Last updated: 15 days ago • Promoted
    Security Engineer, Operating Systems

    Security Engineer, Operating Systems

    Menlo Ventures • San Francisco, CA, United States
    Full-time
    Anthropic’s mission is to create reliable, interpretable, and steerable AI systems.We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group ...Show more
    Last updated: 30+ days ago • Promoted
    IT Engineer (Hybrid) — Internal IT, Security & AV Lead

    IT Engineer (Hybrid) — Internal IT, Security & AV Lead

    Nooks • San Francisco, CA, United States
    Full-time
    A tech startup is looking for an IT Engineer to oversee all internal IT functionalities.The role includes user onboarding, managing the helpdesk, and administering company systems like Google Works...Show more
    Last updated: 30+ days ago • Promoted
    Security Engineer : AI Infra Security, On-Site SF + Equity

    Security Engineer : AI Infra Security, On-Site SF + Equity

    Recruiting From Scratch • San Francisco, CA, United States
    Full-time
    A fast-growing AI infrastructure company in San Francisco is seeking a Security Engineer.You'll own the security function, design security controls, and respond to emerging threats.The ideal candid...Show more
    Last updated: 16 days ago • Promoted
    Information Security Engineer

    Information Security Engineer

    Irvine Technology Corporation • San Francisco, CA, United States
    Full-time
    San Francisco, CA (Hybrid – 3 days on-site).Irvine Technology Corporation (ITC) – a leading provider of technology and staffing solutions. Security Operations & Incident Response.Assist with 24x7 se...Show more
    Last updated: 30+ days ago • Promoted
    Security Engineer, Operating Systems

    Security Engineer, Operating Systems

    Anthropic • San Francisco, CA, United States
    Full-time
    Security Engineer, Operating Systems.Join Anthropic as an Operating Systems Security Engineer to harden and secure the OS layer of our AI infrastructure. You will design and implement OS‑level secur...Show more
    Last updated: 30+ days ago • Promoted
    First IT Systems Engineer in SF - Zero-Trust & SSO

    First IT Systems Engineer in SF - Zero-Trust & SSO

    Braintrust Data, Inc. • San Francisco, CA, United States
    Full-time
    A leading AI observability platform in San Francisco seeks a hands-on IT Systems Engineer to design, implement, and manage their IT infrastructure. This in-person role involves creating a zero-trust...Show more
    Last updated: 13 days ago • Promoted
    Cyber Security Engineer - San Francisco

    Cyber Security Engineer - San Francisco

    Yeah! Global • San Francisco, CA, United States
    Full-time
    About the job Cyber Security Engineer - San Francisco.Note : This job does not offer any Visa sponsorship.We are looking for applicants already living in the USA. Our client is seeking a highly skill...Show more
    Last updated: 4 days ago • Promoted
    Strategic Corporate Security Engineer

    Strategic Corporate Security Engineer

    Harvey • San Francisco, CA, United States
    Full-time
    A leading technology company in San Francisco is seeking a skilled IT Security Engineer to enhance its corporate security program. This role focuses on ensuring robust IT systems and compliance, req...Show more
    Last updated: 3 days ago • Promoted
    Enterprise IT Engineer — Identity, Security & Cloud

    Enterprise IT Engineer — Identity, Security & Cloud

    Arena Intelligence • San Francisco, CA, United States
    Full-time
    A leading tech company in San Francisco is seeking an experienced Enterprise IT Engineer to manage and secure their systems. This role will involve shaping the identity access foundation, administra...Show more
    Last updated: 18 days ago • Promoted
    Enterprise Security Engineer

    Enterprise Security Engineer

    OpenAI • San Francisco, CA, United States
    Full-time
    Within the OpenAI Security organization, our IT team works to ensure our team of researchers, engineers, and staff have the tools they need to work comfortably, securely, and with minimal interrupt...Show more
    Last updated: 30+ days ago • Promoted
    Hands-On Enterprise IT Engineer — Identity & Security

    Hands-On Enterprise IT Engineer — Identity & Security

    LMArena • San Francisco, CA, United States
    Full-time
    A cutting-edge technology firm in San Francisco is seeking an experienced Enterprise IT Engineer to design, secure, and scale crucial systems. You will own critical components of our enterprise stac...Show more
    Last updated: 19 days ago • Promoted
    Senior IT Security & Infrastructure Engineer (Temporary)

    Senior IT Security & Infrastructure Engineer (Temporary)

    Vir Biotechnology, Inc. • San Francisco, CA, United States
    Full-time
    Senior Infrastructure & Security Engineer (Temporary).Senior Infrastructure & Security Engineer (Temporary).Senior Infrastructure & Security Engineer (Temporary). Be among the first 25 applicants.Se...Show more
    Last updated: 30+ days ago • Promoted
    Sr. Security Engineer, eero, eero Security

    Sr. Security Engineer, eero, eero Security

    Amazon • San Francisco, CA, United States
    Full-time
    At eero, our mission is to serve as the central nervous system of the home.While we began by revolutionizing home WiFi, we now create comprehensive and secure solutions that serve both wireless and...Show more
    Last updated: 30+ days ago • Promoted
    Senior Security Engineer — Corporate Security (Hybrid SF)

    Senior Security Engineer — Corporate Security (Hybrid SF)

    Persona • San Francisco, CA, United States
    Full-time
    A leading identity management firm is seeking a Senior Security Engineer to enhance corporate security efforts in San Francisco. The role involves developing security measures and collaborating with...Show more
    Last updated: 15 days ago • Promoted