Information Security Engineer

Who we are

We are 4 people, all hands-on, and the founders still run engagements themselves. Every report is written by the person who did the testing, not a separate writing team.

The role

We need an Information Security Engineer. This is a full-time position based in Bratislava, Bratislava Region. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. This is a hybrid role. Most of the team is in the Bratislava office Tuesday to Thursday.

In your first few months you will

• Own secrets management, key rotation and KMS policies
• Automate security checks in CI/CD pipelines
• Review code and pull requests for security issues
• Triage bug bounty reports from HackerOne or Bugcrowd
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub

You might be a good fit if you

• 3+ years in security engineering, application security or a related engineering role
• Hands-on cloud security experience in AWS, Azure or GCP
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Programming or scripting ability in Python, Go or similar
• Good judgment on risk: knowing what to fix now and what can wait

What we offer

Rate: €3,300-€3,800 monthly

• Private medical care
• Meal vouchers
• Multisport card

Candidates must be eligible to work in Slovakia.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Mallardgrid s.r.o..