Cyber Security Engineer

Our threat intelligence team tracks ransomware groups and publishes research used across the industry. Training budget covers one SANS course or equivalent per year.

Role overview

We have an immediate opening for a Cyber Security Engineer in Belgrade. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. The work is on site and cannot be done remotely.

Responsibilities

• Respond to security incidents and lead the technical investigation.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Assess third-party vendors and SaaS integrations for security risk.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Write secure coding guidelines and run developer training.
• Coordinate external penetration tests and track remediation.

Required qualifications

• Good judgment on risk: knowing what to fix now and what can wait.
• Ability to explain security issues to engineers without lecturing them.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Programming or scripting ability in Python, Go or similar.

Nice to have

• Contributions to security tools or published CVEs.
• IaC scanning with Checkov or tfsec.

Rate: RSD 410,000 - RSD 480,000 monthly

Pay and benefits

• Private medical care.
• Extra annual leave days.
• Language courses.
• Training budget.
• Flexible hours.
• Annual bonus.
• Multisport card.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Bayward Security d.o.o..