Associate Security Engineer

Headquartered in Charlotte since 1999, the company now sells in 40 countries and supports customers in 11 languages. Public sector agencies, utilities and large health systems license our asset management platform under multi-year contracts. Laptops are MacBook Pros, and you pick your own editor.

Position summary:

Chesapeake Apps has an opening for an Associate Security Engineer. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. Remote, open to candidates across the US. Normal working hours, Monday to Friday.

Key responsibilities:

• Run threat modeling sessions with engineering teams on new features and architecture changes
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Assess third-party vendors and SaaS integrations for security risk
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Triage bug bounty reports from HackerOne or Bugcrowd

Required qualifications:

• 0-2 years in security engineering, application security or a related engineering role
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Good judgment on risk: knowing what to fix now and what can wait
• Ability to explain security issues to engineers without lecturing them
• Experience with SIEM, EDR or vulnerability management tools

Nice to have:

• Malware analysis or digital forensics background
• IaC scanning with Checkov or tfsec
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

Rate: $109,000 - $138,000 per year

What you get:

• Health, dental and vision coverage starting on day one
• 401(k) with a 100% match up to 5%
• Paid holidays
• Employee assistance program
• Cell phone reimbursement
• Short- and long-term disability
• Gym membership reimbursement

EOE. We participate in E-Verify.

Most hires start within two to three weeks of an offer.

This position requires a background check.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Chesapeake Apps LLC.