Graduate Security Engineer

We operate two 24/7 network operations centres and a security operations centre, staffed in three shifts. We started in 2021 and have grown to about 240 people. Certification exams are paid for, and passing one comes with a raise.

Overview

We are adding a Graduate Security Engineer to our Detection and Response team. The Detection and Response team is small and hands-on. We need someone who writes code and automation, not just policy. We engage team members in Iceland as full-time contractors. Most of our contractors have been with us for more than two years. Core hours are 9:00 AM to 1:00 PM US Eastern.

Duties

• Triage bug bounty reports from HackerOne or Bugcrowd
• Write secure coding guidelines and run developer training
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Review code and pull requests for security issues
• Own secrets management, key rotation and KMS policies
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Coordinate external penetration tests and track remediation

Required qualifications

• 1+ years in security engineering, application security or a related engineering role
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Programming or scripting ability in Python, Go or similar
• Good judgment on risk: knowing what to fix now and what can wait

Preferred

• Kubernetes and container security (Falco, OPA Gatekeeper)
• Running a bug bounty program
• IaC scanning with Checkov or tfsec

Compensation and benefits

• Flexible hours
• Monthly internet allowance
• Long-term engagement

Include your expected salary and earliest start date with your application.

Applications are reviewed weekly.

Duration: 6 months. Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Outcrop LLC.