Cyber Security Engineer

The previous person in this role moved to another team. The Application Security team is small and hands-on. We need someone who writes code and automation, not just policy. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. The company is based in Miami, the US. Our team works from several countries. We engage team members in Sri Lanka as full-time contractors. Most of our contractors have been with us for more than two years. Core hours are 9:00 AM to 1:00 PM US Eastern.

What you'll be doing:

• Assess third-party vendors and SaaS integrations for security risk.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Coordinate external penetration tests and track remediation.
• Automate security checks in CI/CD pipelines.

Skills and experience:

• 3+ years in security engineering, application security or a related engineering role.
• Good judgment on risk: knowing what to fix now and what can wait.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Pay and benefits:

• Monthly internet allowance.
• Long-term engagement.

About Shaleshore Labs:

Local news, classifieds and event listings for Florida make up the core of the site. Two million people a month visit our recipe and meal planning site, which earns money from ads and a paid membership.

If you are shortlisted, we will reach out to set up a first call.

Duration: 3 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Shaleshore Labs LLC.