Associate Security Engineer, Product Security

Company overview

Profitable, no outside investors, and no plans to take any. We grow when customers pay us. Two developers, a designer and a support lead make up most of the company, so everyone touches the product.

This is a newly created position. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. Remote position. Most of the team is in Brașov, but nobody is required to come in.

Duties

Assess third-party vendors and SaaS integrations for security risk. Automate security checks in CI/CD pipelines. Triage bug bounty reports from HackerOne or Bugcrowd. Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint. Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub. Own secrets management, key rotation and KMS policies. Respond to security incidents and lead the technical investigation. Review code and pull requests for security issues.

Qualifications

1-2 years in security engineering, application security or a related engineering role. Good judgment on risk: knowing what to fix now and what can wait. Ability to explain security issues to engineers without lecturing them. Hands-on cloud security experience in AWS, Azure or GCP.

Nice to have

Malware analysis or digital forensics background. Contributions to security tools or published CVEs. OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500).

What we offer

Private medical care. Remote work allowance. B2B contract option. Meal vouchers.

If you are shortlisted, we will reach out to set up a first call.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at GW Software S.R.L..