Information Security Engineer, Product Security

About us

Most engagements start with a vulnerability scan and a tabletop exercise with the client's leadership. The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk. Nobody gets in trouble for clicking a test phish. You report it and move on.

The role

Bulwark Cybersecurity is hiring an Information Security Engineer, Product Security to work remotely from the US. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance. You can work from home anywhere in the US. We have no office requirement. Hours are flexible, with one short team call each morning. Please make sure you have a quiet place to work and a solid internet connection.

What you'll work on

• Automate security checks in CI/CD pipelines
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Coordinate external penetration tests and track remediation
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Own secrets management, key rotation and KMS policies
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security

What you bring

• 3+ years in security engineering, application security or a related engineering role
• Hands-on cloud security experience in AWS, Azure or GCP
• Programming or scripting ability in Python, Go or similar

Why work with us

The base pay range for this position is $155,000-$215,000 per year. Actual pay depends on experience, skills and location.

• Medical, dental and vision insurance
• 401(k) with company match
• Three weeks of PTO to start
• Referral program
• Life insurance
• $1,000 home office setup budget

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Bulwark Cybersecurity.