About the Role
The role involves identifying, analyzing, and mitigating security risks across infrastructure and applications while supporting secure development practices and incident response.
Compensation
Competitive salary and benefits package offered
Work Arrangement
Remote
Team
Collaborative team focused on proactive security solutions
Responsibilities
- Detect and respond to security incidents across distributed systems
- Evaluate system architectures for potential vulnerabilities
- Implement monitoring and alerting for suspicious activity
- Support secure deployment pipelines and CI/CD workflows
- Conduct regular security assessments and penetration testing
- Enforce access controls and identity management policies
- Maintain compliance with security standards and regulations
- Develop automation for repetitive security tasks
- Collaborate with engineering teams to integrate security early
- Document security configurations and response procedures
- Respond to audit findings and recommend improvements
- Monitor threat intelligence sources for emerging risks
- Assist in designing secure network topologies
- Review code for security flaws and suggest fixes
- Lead post-incident reviews to prevent recurrence
- Promote a culture of security awareness across teams
- Manage encryption keys and certificate lifecycles
- Configure and maintain security information and event management tools
- Assess third-party vendor security posture
- Support disaster recovery and business continuity planning
- Ensure secure configuration of cloud platforms
- Track and report on security metrics and KPIs
- Update security policies based on evolving threats
- Coordinate vulnerability scanning and remediation
- Advocate for security best practices in design discussions
Requirements
- Bachelor's degree in computer science, information security, or related field
- Minimum of three years in a security engineering or similar role
- Hands-on experience with cloud platforms such as AWS or GCP
- Proficiency in scripting or programming languages like Python or Go
- Familiarity with containerization and orchestration tools
- Strong understanding of network protocols and security principles
- Experience with SIEM tools and log analysis platforms
- Knowledge of common attack vectors and mitigation techniques
- Ability to assess risk and prioritize remediation efforts
- Experience with identity and access management systems
- Understanding of encryption standards and key management
- Track record of improving security posture through automation
- Solid grasp of secure software development lifecycle
- Familiarity with regulatory frameworks such as SOC 2 or ISO 27001
- Proven ability to communicate technical issues to non-technical stakeholders
- Experience with endpoint detection and response tools
- Background in incident handling and forensic analysis
- Comfortable working in fast-paced, agile environments
- Ability to document processes and configurations clearly
- Strong problem-solving skills under pressure
- Willingness to stay current with emerging threats
- Experience with firewall and IDS/IPS technologies
- Understanding of DNS, TLS, and HTTP security mechanisms
- Skill in writing and reviewing security policies
- Commitment to continuous learning and improvement
Preferred Qualifications
- Certifications such as CISSP, OSCP, or CISM
- Experience with large-scale distributed systems
- Background in red teaming or offensive security
- Familiarity with zero-trust security models
- Contributions to open-source security projects
- Experience in blockchain or cryptocurrency environments
- Knowledge of application security testing tools
- Prior work in regulated industries such as finance or healthcare
- Public speaking or conference presentation experience
- Published articles or research in security domains
Not available
