Graduate Security Engineer

About the job

Junipercast provides managed IT for offices of 10 to 200 users: help desk, patching, backups, Microsoft 365 and firewall management. We are adding a Graduate Security Engineer to our Security team. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. The company is based in Atlanta, the US. We are a distributed team spread across a few time zones. This is a long-term contractor role, paid monthly in USD. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET. We use Slack, Notion and Google Meet. Cameras on for team calls.

The job includes: triage bug bounty reports from HackerOne or Bugcrowd; run threat modelling sessions with engineering teams on new features and architecture changes; automate security checks in CI/CD pipelines; design and maintain SSO, MFA and conditional access with Okta or Entra ID.

Skills and experience:

1+ years in security engineering, application security or a related engineering role.
Hands-on cloud security experience in AWS, Azure or GCP.
Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
Ability to explain security issues to engineers without lecturing them.

We offer annual rate review and company laptop.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Junipercast Inc..