Associate Security Engineer - Detection and Response

About Fortress Computer Services

Our bench is in the back of a strip-mall storefront, where we image laptops and swap failed drives. Certification exams are paid for, and passing one comes with a raise.

The role

Fortress Computer Services is hiring for the Associate Security Engineer - Detection and Response role to secure our cloud infrastructure and the applications that run on it. Hybrid. You will need to be in Sliema at least two days per week.

Day to day

• Assess third-party vendors and SaaS integrations for security risk.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Coordinate external penetration tests and track remediation.
• Automate security checks in CI/CD pipelines.
• Review code and pull requests for security issues.

What we're looking for

• 0-2 years in security engineering, application security or a related engineering role.
• Good judgment on risk: knowing what to fix now and what can wait.
• Ability to explain security issues to engineers without lecturing them.
• Programming or scripting ability in Python, Go or similar.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Also helpful

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

What we offer

• Private health insurance.
• Flexible remuneration plan.
• Hybrid working.
• Stock options.
• Training budget.
• Meal vouchers.

We look at every application, usually within a week.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Fortress Computer Services Ltd.