Cyber Security Engineer

About Thomas Technologies:

Customers use our platform to manage equipment rentals: reservations, check-out, damage photos, invoicing and QuickBooks sync. The product is a mobile app plus a React web dashboard, with a Python and PostgreSQL backend on AWS.

Job summary:

We are creating this position because the workload has grown. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. The company is based in Auburn, the US. We are a distributed team spread across a few time zones. This is a full-time remote role. We use an employer of record in Pakistan, so you get a proper employment contract, not a freelance agreement. Core hours overlap with US Central time, 9:00 AM to 1:00 PM CT.

Responsibilities:

• Review code and pull requests for security issues.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Automate security checks in CI/CD pipelines.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Respond to security incidents and lead the technical investigation.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Own secrets management, key rotation and KMS policies.

Who you are:

• 3+ years in security engineering, application security or a related engineering role.
• Good judgment on risk: knowing what to fix now and what can wait.
• Programming or scripting ability in Python, Go or similar.
• Hands-on cloud security experience in AWS, Azure or GCP.

Pay and benefits:

PKR 540,000 to PKR 690,000 a month

• Paid parental leave.
• Wellness allowance.
• Annual salary review.
• Flexible hours.
• Performance bonus.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Thomas Technologies.