Associate Security Engineer

About Winchwater Labs

The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk. Government contractors use our services to prepare for CMMC assessments and NIST 800-171 compliance.

The role

Looking for an Associate Security Engineer who wants to stay somewhere for a while. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. We work hybrid out of Munich, usually three days in, two days remote.

What you'll do

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Respond to security incidents and lead the technical investigation.

About you

• 0-2 years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.
• Ability to explain security issues to engineers without lecturing them.

Preferred

• IaC scanning with Checkov or tfsec.
• Contributions to security tools or published CVEs.
• Kubernetes and container security (Falco, OPA Gatekeeper)

Perks and benefits

Compensation: €57,000 to €77,000 a year

• Company pension scheme.
• Up to 3 days of home office per week.
• Flexible working hours.
• JobRad bike leasing.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Winchwater Labs e.K..