Cyber Security Engineer (Detection and Response)

Public sector agencies, utilities and large health systems licence our asset management platform under multi-year contracts. Product, engineering and support teams work out of offices in London, England and two nearshore delivery centres.

Role overview

We are adding a Cyber Security Engineer (Detection and Response) to our Security Engineering team. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. We hire in Sri Lanka through an employer of record, so this is a regular full-time job with local payroll and statutory benefits. Core hours are 10:00 AM to 4:00 PM UK time. A stable internet connection and a backup power option are required.

Day to day

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Triage bug bounty reports from HackerOne or Bugcrowd
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Write secure coding guidelines and run developer training
• Run threat modelling sessions with engineering teams on new features and architecture changes

What you need

• 3-5 years in security engineering, application security or a related engineering role
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Good judgment on risk: knowing what to fix now and what can wait
• Hands-on cloud security experience in AWS, Azure or GCP
• Programming or scripting ability in Python, Go or similar
• Experience with SIEM, EDR or vulnerability management tools

Salary: LKR 500,000 - LKR 620,000 per month

Compensation and benefits

• Home office setup budget
• Monthly internet allowance
• Company laptop
• Annual team retreat
• Flexible hours

Candidates must be eligible to work in Sri Lanka.

We will only contact shortlisted applicants.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Brambleloft.