Information Security Engineer

We are a small, self-funded team building a booking app for independent salons and tattoo studios. We keep recurring meetings to Tuesdays and Thursdays where we can.

Wong Technologies has an opening for an Information Security Engineer. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. You can work from home anywhere in the US. We have no office requirement. Strong written English is important, since much of our work is async.

Responsibilities

• Respond to security incidents and lead the technical investigation.
• Automate security checks in CI/CD pipelines.
• Write secure coding guidelines and run developer training.
• Assess third-party vendors and SaaS integrations for security risk.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Run threat modeling sessions with engineering teams on new features and architecture changes.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Review code and pull requests for security issues.

Qualifications

• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Good judgment on risk: knowing what to fix now and what can wait.

What we offer

Salary range: $163,000 - $182,000 annually

• Health, dental and vision coverage starting on day one.
• 401(k) with a 100% match up to 5%.
• 11 paid holidays.
• Profit sharing.
• Employee discount.

Interview process: a phone call, a meeting with the hiring manager, and a final conversation with the team.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Wong Technologies Inc..