Cyber Security Engineer

Who we are:

Products include endpoint protection, email security and a cloud posture management platform. Cotter Labs protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers.

Position summary:

We are adding a Cyber Security Engineer to our Detection and Response team. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. We are headquartered in Halifax and have been hiring remotely since 2020. Contract role, full-time hours, paid in USD at the end of each month. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET. Strong written English is important, since much of our work is async.

Duties:

Triage bug bounty reports from HackerOne or Bugcrowd. Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint. Write secure coding guidelines and run developer training. Own secrets management, key rotation and KMS policies.

Requirements:

3+ years in security engineering, application security or a related engineering role. Hands-on cloud security experience in AWS, Azure or GCP. Strong knowledge of the OWASP Top 10 and common web vulnerabilities. Programming or scripting ability in Python, Go or similar. Good judgment on risk: knowing what to fix now and what can wait. Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0).

Perks and benefits:

Compensation: $4,000 to $4,700/month

Monthly payments via wire transfer or Wise. Company laptop. Long-term engagement. Monthly internet allowance.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cotter Labs.