Associate Security Engineer, Infrastructure Security

We make a web-based inventory and purchasing system used by independent restaurants, breweries and small food manufacturers. Founded in 2010, the business writes the billing, metering and customer portal software that small water and electric utilities run on.

About the role

We are adding an Associate Security Engineer, Infrastructure Security to our Detection and Response team. The Detection and Response team is small and hands-on. We need someone who writes code and automation, not just policy. Remote within the US. The team meets in Berkeley once a quarter, travel covered. Monday to Friday, regular working hours, flexible start and finish.

What you'll do

• Respond to security incidents and lead the technical investigation.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Automate security checks in CI/CD pipelines.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.

Skills and experience

• 0-2 years in security engineering, application security or a related engineering role.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Good judgment on risk: knowing what to fix now and what can wait.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Why work with us

Starting pay: $117,000-$151,000/year, depending on experience and certifications.

• Health, dental and vision coverage starting on day one.
• 401(k) with 4% match.
• Paid holidays.
• Paid sick leave.

We read every application and reply within about a week.

We are unable to sponsor visas for this position.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Dogwoodline.