Cyber Security Engineer

Who we are:

Two developers, a designer and a support lead make up most of the company, so everyone touches the product. We are a small, self-funded team building a booking app for independent salons and tattoo studios. Founded in 2022, we now have 17 employees. On-call rotates weekly and pays a flat stipend whether or not the pager goes off.

What this job is:

Our team is growing and we are hiring a Cyber Security Engineer. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. We hire in India through an employer of record, so this is a regular full-time job with local payroll and statutory benefits. You will need at least 4 hours of overlap with US Central time. Reliable internet and a power backup are a must.

In your first few months you will:

• Respond to security incidents and lead the technical investigation
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Review code and pull requests for security issues
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Coordinate external penetration tests and track remediation
• Triage bug bounty reports from HackerOne or Bugcrowd

What you bring:

• 2+ years in security engineering, application security or a related engineering role
• Hands-on cloud security experience in AWS, Azure or GCP
• Good judgment on risk: knowing what to fix now and what can wait
• Experience with SIEM, EDR or vulnerability management tools

Bonus points:

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Malware analysis or digital forensics background

Pay and benefits:

Salary range: ₹30,00,000 - ₹36,00,000 per year

• Health insurance through our employer-of-record partner
• 24 days paid time off
• Wellness allowance
• Paid sick days

Shortlisted candidates will hear from us within two weeks.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at JM Apps.