Security Engineer

About the role

MACOM is a global leader in the design and manufacture of advanced semiconductor products across a diverse range of end markets, including Data Centers, Telecommunications, Industrial and Aerospace and Defense. The company develops innovative, cutting‑edge technologies and products across the spectrum of radio frequency (RF), microwave, millimeter wave, photonics and high‑speed analog technologies. Its solutions support critical network infrastructure applications such as artificial intelligence, high performance computing, satellite communications, radar, unmanned aerial vehicles, medical equipment, test and measurement and advanced wireless networks. MACOM has more than 75 years of expertise in semiconductor process development, wafer fabrication, circuit design, advanced packaging, systems architecture and applications engineering. The Security Engineer – Cloud & Data role owns the company’s critical intellectual property—from the cloud infrastructure hosting it, to the data repositories storing it, to the endpoints accessing it. Operating on a lean, high‑impact team, you will spend roughly 80% of your time executing technical security operations and 20% defining the authoritative architectural standards for data protection and threat telemetry.

Responsibilities

• Platform Engineering (≈80%): Manage enterprise Endpoint Detection and Response (EDR) and legacy Data Loss Prevention (DLP) agents, overseeing global tuning and deployment.
• Configure Cloud Security Posture Management (CSPM) guardrails across public cloud environments (AWS/Azure).
• Administer Data Security Posture Management (DSPM) tools to identify and lock down over‑permissioned file shares and repositories.
• AppSec Support: Act as a high‑level security advisor to the DevOps team, providing basic guidance on integrating security scanning into existing CI/CD pipelines.
• Strategic Architecture (≈20%): Define the authoritative tool for insider‑threat and UEBA telemetry, tuning down redundant modules in overlapping platforms.
• Design the data classification and access guardrails required before the business can safely adopt enterprise AI tools.
• Lead the technical strategy for decommissioning legacy endpoint agents and consolidating capabilities.

Qualifications

• 3–5 years of experience spanning cloud infrastructure, data protection, and enterprise endpoint security.
• Experience administering enterprise‑grade EDR and data visibility platforms (e.g., CrowdStrike, Varonis, or equivalents).
• Working knowledge of Cloud environments (AWS/Azure) and Infrastructure‑as‑Code principles.
• Nice to have: Basic familiarity with application security concepts and CI/CD pipeline automation (e.g., SAST/DAST, GitLab workflows).

Benefits

• Health, dental, and vision insurance.
• Employer‑sponsored 401(k) plan.
• Paid time off.
• Professional development opportunities.

Pay

The salary range for this position is $95,000 – $154,000. Actual salary offered will depend on factors such as work location, relevant experience, education, and specific knowledge, skills, and abilities.