Information Security Engineer

The company

Over 280 employees work across sales, engineering, consulting and the SOC. Products include endpoint protection, email security and a cloud posture management platform.

Bosun Security is hiring an Information Security Engineer to work remotely from the US. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance. You can work from home anywhere in the US. We have no office requirement. Normal working hours, Monday to Friday. Strong written English is important, since much of our work is async.

Day to day

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Review code and pull requests for security issues.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.

You'll need

• 3+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Desirable

• Kubernetes and container security (Falco, OPA Gatekeeper)

Compensation and benefits

Pay range: $184,000 - $240,000/year. Final offer will depend on experience.

• Medical, dental and vision insurance.
• 401(k) with company match.
• Paid sick leave.
• Employee discount.

EOE. We participate in E-Verify.

Interview process: a phone call, a meeting with the hiring manager, and a final conversation with the team.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Bosun Security.