Graduate Security Engineer

We operate security operations centres on three continents, so alerts are triaged by analysts on day shift wherever they arrive. Over 1,600 employees work across sales, engineering, consulting and the SOC. Nobody gets in trouble for clicking a test phish. You report it and move on.

Overview

Purba Cyber is looking for a Graduate Security Engineer to join a small, steady team. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. You can work from home anywhere in Bangladesh. We have no office requirement. We do not have many meetings. Most updates happen in writing.

What you'll do

• Review code and pull requests for security issues
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Coordinate external penetration tests and track remediation
• Write secure coding guidelines and run developer training
• Automate security checks in CI/CD pipelines
• Respond to security incidents and lead the technical investigation
• Own secrets management, key rotation and KMS policies

Minimum qualifications

• 0-2 years in security engineering, application security or a related engineering role
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Good judgment on risk: knowing what to fix now and what can wait
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Experience with SIEM, EDR or vulnerability management tools
• Ability to explain security issues to engineers without lecturing them
• Programming or scripting ability in Python, Go or similar

Nice to have

• Kubernetes and container security (Falco, OPA Gatekeeper)
• IaC scanning with Checkov or tfsec
• Contributions to security tools or published CVEs
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

Pay and benefits

• Medical insurance
• Provident fund
• Paid leave
• Life insurance

We are reviewing applications as they arrive, so apply early.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Purba Cyber Ltd..