Information Security Engineer

Product, engineering and support teams work out of offices in Laredo, Texas and two nearshore delivery centers. We run one of the larger SaaS platforms for commercial insurance carriers, processing millions of policy transactions a year.

Job summary:

Our team is growing and we are hiring an Information Security Engineer. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance. This role is fully remote within the US. Normal working hours, Monday to Friday. You get a company laptop and a headset before you start.

Main duties:

• Triage bug bounty reports from HackerOne or Bugcrowd
• Own secrets management, key rotation and KMS policies
• Review code and pull requests for security issues
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Write secure coding guidelines and run developer training
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID

Qualifications:

• 2+ years in security engineering, application security or a related engineering role
• Good judgment on risk: knowing what to fix now and what can wait
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Hands-on cloud security experience in AWS, Azure or GCP
• Experience with SIEM, EDR or vulnerability management tools
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements

Nice to have:

• Malware analysis or digital forensics background
• Contributions to security tools or published CVEs
• IaC scanning with Checkov or tfsec
• Kubernetes and container security (Falco, OPA Gatekeeper)

What we offer:

• Health, dental and vision coverage starting on day one
• 401(k) with company match
• Paid sick leave
• Vision insurance

Laredo Systems is an Equal Opportunity Employer, including disability and protected veteran status.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Laredo Systems.