Cyber Security Engineer

About Highland IT:

Highland IT provides managed IT for offices of 10 to 200 users: help desk, patching, backups, Microsoft 365 and firewall management. After-hours on-call comes around every fourth week.

The role:

Highland IT is looking for a Cyber Security Engineer to join a small, steady team. The Cloud Security team is small and hands-on. We need someone who writes code and automation, not just policy. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Our headquarters is in London, and about a third of the team works remotely from other countries. This is a full-time remote role. We use an employer of record in India, so you get a proper employment contract, not a freelance agreement. Working hours overlap with UK business hours.

What you'll do:

• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Triage bug bounty reports from HackerOne or Bugcrowd
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Own secrets management, key rotation and KMS policies
• Write secure coding guidelines and run developer training
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic

What we're looking for:

• 2+ years in security engineering, application security or a related engineering role
• Ability to explain security issues to engineers without lecturing them
• Programming or scripting ability in Python, Go or similar
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Good judgment on risk: knowing what to fix now and what can wait

Also helpful:

• Running a bug bounty program
• Contributions to security tools or published CVEs
• Kubernetes and container security (Falco, OPA Gatekeeper)

What you get:

• Stock options
• Annual salary review
• Home office setup budget
• Co-working space stipend

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Highland IT.