Cyber Security Engineer

About Buckeyefield

More than 9,000 organisations use our HR and payroll suite, from regional hospitals to school districts. Annual releases gave way to two-week sprints years ago, and the platform now handles over 200 million API calls a day. We started in 1996 and have grown to about 71,100 people.

Role overview

We are adding a Cyber Security Engineer to our Detection and Response team. The Detection and Response team is small and hands-on. We need someone who writes code and automation, not just policy. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. You will join as an independent contractor on a long-term agreement. Payment is monthly in USD. Normal working hours, Monday to Friday. You will need a stable internet connection and a backup power source (UPS or inverter).

Day to day

• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Run threat modelling sessions with engineering teams on new features and architecture changes.

Required qualifications

• 2+ years in security engineering, application security or a related engineering role.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Experience with SIEM, EDR or vulnerability management tools.
• Good judgment on risk: knowing what to fix now and what can wait.
• Programming or scripting ability in Python, Go or similar.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Nice to have

• Contributions to security tools or published CVEs.

Why work with us

• Monthly internet allowance.
• Flexible hours.
• Long-term engagement.

Please submit your CV in English.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Buckeyefield Corp..