Information Security Engineer

About us

Most engagements start with a vulnerability scan and a tabletop exercise with the client's leadership. The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk. Nobody gets in trouble for clicking a test phish. You report it and move on.

Overview

Bulwark Cybersecurity is hiring for the Information Security Engineer role to secure our cloud infrastructure and the applications that run on it. You can work from home anywhere in the US. We have no office requirement. Hours are flexible, with one short team call each morning. We talk mostly in Slack and hop on quick calls when something needs discussing.

In this role you will

• Coordinate external penetration tests and track remediation
• Own secrets management, key rotation and KMS policies
• Review code and pull requests for security issues
• Run threat modeling sessions with engineering teams on new features and architecture changes
• Assess third-party vendors and SaaS integrations for security risk
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint

Who you are

• 2+ years in security engineering, application security or a related engineering role
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements
• Good judgment on risk: knowing what to fix now and what can wait
• Hands-on cloud security experience in AWS, Azure or GCP

Also helpful

• IaC scanning with Checkov or tfsec
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

What you get

• Health insurance
• 401(k) with company match
• Three weeks of PTO to start

Bulwark Cybersecurity provides equal employment opportunities to all employees and applicants.

We review applications on a rolling basis.

Apply with your resume. A cover letter is optional.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Bulwark Cybersecurity.