As a Senior Security Engineer, you'll enhance security measures across cloud and on-premises infrastructure, lead automation efforts, and implement Zero Trust policies.
Copia Automation brings modern developer tools and resiliency to industrial automation. Our product provides Git-based source control for automation professionals as well as remote, real-time monitoring of the entire plant floor + state of the art backup and recover technology. We are a well-funded startup and with a growing list of happy customers throughout the industrial space.
As a Copia employee, you’ll solve challenging, unique, and meaningful problems alongside passionate coworkers, while we change the way everything gets built.
We’re seeking a Senior Security Engineer to strengthen our threat model and implement robust security controls across multiple domains. In this role, you’ll lead initiatives to secure both cloud and on-premises infrastructure — spanning networks, endpoints, identity and access management, and data protection. You’ll design and automate security solutions, integrate them into CI/CD pipelines, and enhance detection, response, and hardening across environments.
You are a self-starter who thrives with minimal supervision, capable of independently driving complex security projects from concept to production. You prioritize effectively, communicate clearly with cross-functional teams, think creatively to address emerging threats, and deliver exceptional, measurable results.
What you'll do:
- Develop, tune, and automate detection and alerting pipelines; support incident response investigations and root-cause analysis
- Lead endpoint and server hardening efforts across Windows, macOS, and Linux systems, ensuring secure configurations and continuous compliance
- Mature and maintain enterprise detection and response capabilities; drive toward 100% visibility and monitoring coverage across all assets
- Oversee vulnerability management lifecycle — from scanning and triage to remediation tracking and executive reporting
- Design and implement security automation to streamline access management, alert triage, and compliance evidence collection
- Develop, enforce, and continuously refine Zero Trust Network Access (ZTNA) policies for both on-premises and cloud environments
- Collaborate with engineering teams to support threat modeling, application security reviews, and secure-by-design architecture decisions
What you'll need:
- 5+ years of experience in security engineering, cloud security, or incident response, ideally within a SaaS or cloud-native company operating at scale
- Deep understanding of AWS security services (GuardDuty, IAM, KMS, CloudTrail, etc.) and best practices for securing multi-account environments
- Hands-on experience with endpoint and server monitoring using CrowdStrike, including API integrations and telemetry enrichment across the monitoring stackExpertise designing, tuning, and maintaining SIEM and detection pipelines in Datadog, including custom metrics, dashboards, and automated alert workflows
- Strong proficiency with Terraform, including secure IaC design, module development, and policy-as-code implementations
- Familiarity with operational technology (OT) security, including segmentation, asset discovery, and threat detection in industrial or lab environments
- Experience automating security operations using Python, PowerShell, or Bash for orchestration and response workflows
- Strong understanding of vulnerability management, patch governance, and remediation prioritization strategies
- Experience implementing Zero Trust Network Access (ZTNA) and securing hybrid cloud/on-prem environments.
Come join us!
Copia is growing extraordinarily fast! Join a best-in-class start-up with huge amounts of upside and impact. Our headquarters is in New York City.
Top Skills
AWS
Bash
Cloudtrail
Crowdstrike
Datadog
Guardduty
Iam
Kms
Powershell
Python
Terraform
Copia Automation New York, New York, USA Office
New York, NY, United States
Similar Jobs
Cloud • Information Technology • Machine Learning
Perform hands-on vulnerability triage, risk assessment, and remediation tracking across cloud and specialized infrastructure. Validate and improve automated triage/remediation workflows, support zero-day response and incident investigations, maintain runbooks, participate in on-call rotations, and drive operational improvements to reduce manual toil.
Top Skills:
Wiz,Rapid7,Qualys,Tenable,Python,Bash,Aws,Gcp,Azure,Tines,Splunk Soar,Kubernetes,Containers,Gpu Firmware,Dpu Firmware,Bmc,Ipmi,Soc 2,Iso 27001,Fedramp
Cloud • Information Technology • Machine Learning
Design and implement security controls for identity, access management, and endpoint security. Lead initiatives around zero trust and phishing-resistant MFA.
Top Skills:
EdrEntra IdGoMdmMfaOauthOktaOpenid ConnectPythonRbacSAMLScimSIEMSso
Cloud • Information Technology • Machine Learning
Design, deploy, and maintain SOAR capabilities for security automation, develop workflows, and integrate AI tooling for enhanced security responses.
Top Skills:
ArgocdGitGoKubernetesPython
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
