Graduate Security Engineer

Our team is growing and we are hiring a Graduate Security Engineer. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Our team is spread across 17 countries. Headquarters is in Utrecht. We engage team members in India as full-time contractors. Most of our contractors have been with us for more than two years. Core hours are 10:00 to 15:00 CET. Please make sure you have dependable internet and backup power.

Essential duties and responsibilities:

• Assess third-party vendors and SaaS integrations for security risk.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Triage bug bounty reports from HackerOne or Bugcrowd.

Required qualifications:

• Programming or scripting ability in Python, Go or similar.
• Ability to explain security issues to engineers without lecturing them.
• Experience with SIEM, EDR or vulnerability management tools.

What you get:

Salary: $1,800 - $2,200 monthly

• Long-term engagement.
• Company laptop.
• Flexible hours.

About us:

We are 17 people, all hands-on, and the founders still run engagements themselves. Aldridge is a small team of former military and law enforcement analysts doing pen tests and incident response.

Applications are reviewed on a rolling basis.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Aldridge B.V..