Information Security Engineer - Remote

Our bench is in the back of a strip-mall storefront, where we image laptops and swap failed drives. Every tech does a bit of everything, from printer jams to firewall rules. Our dress code is a company polo and clean jeans.

JOB SUMMARY:

We are adding headcount to this team, so this is a new seat. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote within Belgium. The team meets in Liège once a quarter, travel covered. You can set your own hours around a daily morning check-in.

DUTIES:

• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Write secure coding guidelines and run developer training.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Own secrets management, key rotation and KMS policies.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.

MINIMUM QUALIFICATIONS:

• 3-5 years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Programming or scripting ability in Python, Go or similar.

WHAT YOU GET:

• Pension scheme.
• 8% holiday allowance.
• Travel allowance.
• Laptop and phone.
• 25 annual leave days.

Please submit your CV in English.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Sambre Tech Support BV.