Senior Information Security Engineer

Make Your Mark: Reporting to the Senior Director of Information Security, the Sr. Information Security Engineer will play a lead role in executing security strategy and consulting on best-in-class security architecture and security posture for BlackLine. In this role you will provide on-call duties, manage/triage ticket queues, review access requests, review architecture, implement security solutions, collaborate with cross-functional teams, perform vulnerability management functions, and execute the evolution of Blackline’s Enterprise Information Security components. You'll Get To: Participate in a 'follow-the-sun' on-call schedule, acting as the primary responder during the India shift to monitor, triage, and manage the security alerts queue. Bridge the gap between research and remediation by developing manual runbooks (SOPs) and automated playbooks needed to handle threats and eliminate noise. Establish the operational scope and testing boundaries for security assessments and penetration tests, focusing on targeted risk discovery and impact. Apply a research-first mindset to incident response, demonstrating the critical thinking needed to independently triage threats and figure out new tools across a varied security landscape. Operationalize security infrastructure through Terraform, with the foundational knowledge to independently research and implement automation across various providers and platforms. Manage the operation of key security technologies, including Endpoint Detection and Response (EDR), Data Loss Prevention (DLP), and Web Application Firewalls (WAF). Leverage AI and LLMs to accelerate security analysis, automate repetitive tasks, and drive operational efficiency across the security stack. Flex into evolving security initiatives and technical projects as they arise, taking ownership of tasks that fall beyond the initial scope of this role. Define effective information security standards applicable to specific environments. Create and maintain operational reports and security metrics, translating raw data into the technical insights required for data-driven decision-making. Serve as a technical leader and mentor, providing guidance to junior engineers and collaborating with cross-functional teams on security best practices. What You'll Bring: 5+ years of hands-on information security experience, including 1 year of experience managing Web Application Firewalls (WAF). Practical experience with cloud security platforms like SCCE, AWS Security Hub, or Azure Security Center, and the technical "scrappiness" to research and utilize new security services across a multi-cloud environment. Strong problem-solving and analytical skills with the ability to identify security risks and propose effective solutions. Highly autonomous and productive in performing activities, requiring minimal direction from management. Proven ability to leverage scripting languages, such as Python, Bash, and PowerShell, to interface with…