Graduate Security Engineer

Who we are:

We are 11 people, all hands-on, and the founders still run engagements themselves.

What this job is:

Baton Rouge Cyber is hiring for the Graduate Security Engineer role to secure our cloud infrastructure and the applications that run on it. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. You will be employed through our employer-of-record partner in India, with a local contract and salary paid in Indian rupees. You will need at least 4 hours of overlap with US Central time. We use Slack, Notion and Google Meet. Cameras on for team calls.

What you'll work on:

• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Triage bug bounty reports from HackerOne or Bugcrowd
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Respond to security incidents and lead the technical investigation
• Write secure coding guidelines and run developer training

What you bring:

• 1-2 years in security engineering, application security or a related engineering role
• Experience with SIEM, EDR or vulnerability management tools
• Ability to explain security issues to engineers without lecturing them
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Good judgment on risk: knowing what to fix now and what can wait

Nice to have:

• Malware analysis or digital forensics background

Why work with us:

• Annual learning budget
• Two weeks of paid leave at year end
• Company laptop
• Public holidays observed per your country
• Annual salary review
• Annual team retreat
• Performance bonus

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Baton Rouge Cyber LLC.