Information Security Engineer

Advertising, subscriptions and transaction fees each bring in a significant share of revenue. Traffic during holiday peaks can reach ten times normal levels, and the platform is built for it. We started in 1996 and have grown to about 109,600 people.

THE ROLE

Canalcross is hiring an Information Security Engineer to work remotely from the US. The Security team is small and hands-on. We need someone who writes code and automation, not just policy. We are headquartered in Madrid and have been hiring remotely since 2020. You will be employed through our employer-of-record partner in the US, with a local contract and salary paid in USD. Working hours overlap with Central European Time. We send you a laptop and the accessories you need on day one.

IN THIS ROLE YOU WILL

Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security. Run threat modeling sessions with engineering teams on new features and architecture changes. Write secure coding guidelines and run developer training. Triage bug bounty reports from HackerOne or Bugcrowd. Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint. Design and maintain SSO, MFA and conditional access with Okta or Entra ID. Respond to security incidents and lead the technical investigation. Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.

REQUIRED QUALIFICATIONS

3+ years in security engineering, application security or a related engineering role. Ability to explain security issues to engineers without lecturing them. Experience with SIEM, EDR or vulnerability management tools. Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements. Good judgment on risk: knowing what to fix now and what can wait.

NICE TO HAVE

Contributions to security tools or published CVEs. Malware analysis or digital forensics background. IaC scanning with Checkov or tfsec.

BENEFITS

Annual salary review. Health insurance through our employer-of-record partner. Wellness allowance. Flexible hours. Two weeks of paid leave at year end.

We are an equal opportunity employer. If you need an accommodation during the application process, let us know.

This position requires a background check.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Canalcross.