Cyber Security Engineer - Identity

About us

Inkwell HQ is a 16-person team running a niche online store for vintage audio parts. Orders are packed by hand for two carrier pickups a day, and customer emails go to whoever is free.

We are adding headcount to this team, so this is a new seat. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. Fully remote. You can work from anywhere in Portugal. Weekday working hours, with room to shift your day when needed.

What you'll do

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Automate security checks in CI/CD pipelines
• Assess third-party vendors and SaaS integrations for security risk
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Respond to security incidents and lead the technical investigation

Requirements

• 2+ years in security engineering, application security or a related engineering role
• Programming or scripting ability in Python, Go or similar
• Good judgment on risk: knowing what to fix now and what can wait
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Hands-on cloud security experience in AWS, Azure or GCP

Also helpful

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

What we offer

• Private health insurance
• Training budget
• Flexible remuneration plan
• Meal vouchers

We review applications as they come in.

Please submit your CV in English.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Inkwell HQ.