Associate Security Engineer

A bit about us

Frontier Software builds scheduling and dispatch software for field service companies, from two-truck plumbing outfits to regional HVAC contractors. Since 1999, the company has sold practice management software to dental and veterinary clinics in the US. On-call rotates weekly and pays a flat stipend whether or not the pager goes off.

Overview

We are creating this position because the workload has grown. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This role is fully remote within the US.

In this role you will

• Own secrets management, key rotation and KMS policies
• Write secure coding guidelines and run developer training
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Review code and pull requests for security issues

What you'll need

• 0-2 years in security engineering, application security or a related engineering role
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Hands-on cloud security experience in AWS, Azure or GCP
• Ability to explain security issues to engineers without lecturing them
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities

Benefits

The base pay range for this position is $105,000 - $123,000 annually. Actual pay depends on experience, skills and location.

• Health, dental and vision coverage starting on day one
• 401(k) with company match
• Three weeks of PTO to start
• Dental insurance
• Professional development budget
• Home office stipend

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Frontier Software.