Graduate Security Engineer

Position summary:

We are adding a Graduate Security Engineer to our operations team. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. We are headquartered in San Jose and have been hiring remotely since 2020. You will join as an independent contractor on a long-term agreement. Payment is monthly in USD. Our standups are at 9:00 AM Pacific.

Day to day:

• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Coordinate external penetration tests and track remediation.
• Respond to security incidents and lead the technical investigation.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Own secrets management, key rotation and KMS policies.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Review code and pull requests for security issues.

Who you are:

• 1-2 years in security engineering, application security or a related engineering role.
• Good judgment on risk: knowing what to fix now and what can wait.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Hands-on cloud security experience in AWS, Azure or GCP.

Compensation and benefits:

• Monthly internet allowance.
• Monthly payments via wire transfer or Wise.
• Long-term engagement.
• Annual rate review.

Who we are:

Every tech does a bit of everything, from printer jams to firewall rules. Dentists, insurance agents and law offices make up most of the client list. Company vehicles are provided for techs who drive to client sites.

Applications are reviewed weekly.

Duration: 9 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at BC Computer Services.