Security Engineer Resume Example (2026 Guide)
Security Engineer resume example
A complete sample in the Modern template FitMyRole exports. The person and employers are fictional; the structure, skills and bullet style are what to copy.
Samira Khoury
[email protected] • (555) 018-5527 • Arlington, VA • linkedin.com/in/samirakhoury
Professional Summary
Senior Security Engineer with 11 years in application security, cloud security and incident response, from a SOC analyst seat to leading product security for a benefits SaaS platform. Secures 140 microservices across 38 AWS accounts and the personal data of 3 million plan members, and owns the technical controls behind SOC 2 Type II and HIPAA. Cut open critical and high vulnerabilities by 72% by adding SAST, DAST and dependency scanning to every CI pipeline with fix SLAs that teams meet. Leads incident response and works as a partner to engineering, favoring secure defaults and guardrails over gatekeeping.
Technical Skills
- Application Security: SAST (Semgrep, Checkmarx), DAST (OWASP ZAP, Burp Suite Pro), software composition analysis (Snyk), threat modeling (STRIDE), OWASP Top 10, secure code review
- Cloud Security: AWS (IAM, GuardDuty, Security Hub, KMS, CloudTrail), Service Control Policies, Wiz, CIS Benchmarks, Terraform, Kubernetes security
- Security Operations: SIEM (Splunk Enterprise Security, QRadar, ArcSight), detection engineering, CrowdStrike Falcon EDR, incident response, digital forensics, Wireshark
- Vulnerability Management: Tenable.sc, Nessus, risk-based prioritization (CVSS, EPSS), patch management, remediation SLAs, penetration testing
- Compliance & Frameworks: SOC 2 Type II, HIPAA, PCI DSS, NIST Cybersecurity Framework, NIST SP 800-53, FFIEC, ISO 27001
- Identity & Access: Okta, SSO and SAML, MFA, least privilege, privileged access management, HashiCorp Vault, AWS Secrets Manager
- Scripting & Automation: Python, Bash, SQL, GitHub Actions, Jira automation
Education & Certification
- Coursework focus: Network Security, Applied Cryptography, Digital Forensics and Secure Software Development.
Work Experience
Senior Security EngineerMarch 2021 – PresentKestrel Benefits Software, Arlington, VA
- Cut open critical and high vulnerabilities by 72% in 18 months by adding Semgrep SAST, OWASP ZAP DAST and Snyk dependency scanning to all 140 service pipelines in GitHub Actions.
- Lowered median time to remediate critical findings from 41 days to 9 by routing scanner results to code owners in Jira, removing duplicate noise and publishing a weekly scorecard to engineering directors.
- Led response to 6 security incidents, including a leaked API key and a credential-stuffing attack on member logins, containing each within 4 hours and running blameless postmortems with tracked actions.
- Built detections in Splunk Enterprise Security for CloudTrail, GuardDuty and Okta logs, cutting false-positive alerts by 65% and bringing mean time to detect priority threats under 15 minutes.
- Raised CIS AWS Foundations Benchmark compliance across 38 accounts from 61% to 96% with Service Control Policies, hardened Terraform modules and Wiz posture checks.
- Own the technical controls for SOC 2 Type II and HIPAA, supplying evidence for 3 consecutive audits with no exceptions in the security domain.
- Run STRIDE threat modeling for new features with product teams and teach a quarterly secure coding workshop on the OWASP Top 10 that 120 engineers have attended.
Security EngineerJune 2017 – February 2021Fall Line Federal Bank, Richmond, VA
- Ran the vulnerability management program for 4,500 servers and endpoints in Tenable.sc, raising on-time patching of critical vulnerabilities (within 30 days) from 70% to 95%.
- Deployed CrowdStrike Falcon EDR to 3,200 endpoints in 10 weeks with the desktop team, replacing legacy antivirus and blocking 2 ransomware attempts in its first year.
- Penetration tested 12 customer-facing web applications with Burp Suite Pro before release, finding 9 high-risk issues including an IDOR flaw in online banking that was fixed before launch.
- Prepared technical evidence for FFIEC and PCI DSS examinations and closed all 14 open audit findings by their agreed deadlines.
- Tuned the QRadar SIEM with the SOC by retiring 80 noisy rules and writing 25 new use cases, reducing daily alert volume from 1,200 to 300.
SOC AnalystJuly 2015 – May 2017Sentry Point Managed Security, Herndon, VA
- Triaged about 60 SIEM alerts per shift across 25 client environments in ArcSight, escalating confirmed incidents to client security teams within the 30-minute SLA.
- Investigated phishing, malware and brute-force incidents with Wireshark packet captures and endpoint logs, writing incident reports clients used for their own compliance records.
- Wrote 15 playbooks for common alert types that cut average triage time for new analysts from 25 minutes to 12.
- Promoted from Tier 1 to Tier 2 analyst after 10 months, then trained 4 new Tier 1 analysts on the escalation process.
Want yours to read like this? Upload your resume and a job posting, and FitMyRole rewrites it for that job in this template.
Tailor my resumeWhy This Resume Works
- Risk reduction is quantified the way security leaders report it: open critical and high vulnerabilities down 72%, median time to remediate from 41 days to 9, and CIS Benchmark compliance from 61% to 96%.
- SAST, DAST, SIEM, incident response and compliance each have their own bullet with a named tool (Semgrep, OWASP ZAP, Splunk Enterprise Security, SOC 2 Type II), so the resume clears an ATS keyword screen without a padded list.
- The incident bullet gives count, type and containment time ("6 security incidents ... containing each within 4 hours"), which answers the first interview question before it is asked.
- Cloud security is concrete for a cloud-heavy employer: 38 AWS accounts, Service Control Policies, GuardDuty detections and Wiz posture checks.
- Eleven years show a believable path from SOC analyst to bank security engineer to senior product security, with CISSP and AWS Security Specialty dated in their own section.
Common Resume Mistakes
- Listing only tools without outcome or metrics.
- Missing compliance or incident response keywords.
- No quantification of risk reduction.
Keywords Recruiters Look For
- Security
- SAST
- DAST
- Vulnerability
- Incident response
- SIEM
- Compliance
- Cloud security
Get more interviews. Tailor your resume automatically
Want to tailor your resume to the job you want? Use FitMyRole to analyze your resume and rewrite it for the role. Before sending your next application, run your resume through FitMyRole to tailor it to the job description.
Try FitMyRole free