Junior Cyber Security Engineer

About Pebblegrid

Annual revenue from managed services has grown every year since 1984. Pebblegrid protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers.

Position summary

We are adding a Junior Cyber Security Engineer to our Application Security team. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. You will join as an independent contractor on a long-term agreement. Payment is monthly in USD. You will need at least 4 hours of overlap with US Central time.

Your responsibilities

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Triage bug bounty reports from HackerOne or Bugcrowd
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Write secure coding guidelines and run developer training
• Own secrets management, key rotation and KMS policies
• Assess third-party vendors and SaaS integrations for security risk

About you

• 1+ years in security engineering, application security or a related engineering role
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Ability to explain security issues to engineers without lecturing them
• Good judgment on risk: knowing what to fix now and what can wait

Why work with us

Salary: $1,500 to $1,850 monthly

• Monthly payments via wire transfer or Wise
• Paid time off
• Monthly internet allowance

We may close this posting early once we have enough applications.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Pebblegrid LLC.