Junior Security Engineer

Who we are:

Most engagements start with a vulnerability scan and a tabletop exercise with the client's leadership. The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk. We write internal post-mortems after every major engagement, including what went wrong.

The role:

Furrowset Cyber is hiring for the Junior Security Engineer role to secure our cloud infrastructure and the applications that run on it. The Detection and Response team is small and hands-on. We need someone who writes code and automation, not just policy. Hybrid. You will need to be in Yokohama at least two days per week.

Day to day:

• Triage bug bounty reports from HackerOne or Bugcrowd
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Automate security checks in CI/CD pipelines
• Assess third-party vendors and SaaS integrations for security risk

You have:

• Experience with SIEM, EDR or vulnerability management tools
• Hands-on cloud security experience in AWS, Azure or GCP
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Ability to explain security issues to engineers without lecturing them

Desirable:

• IaC scanning with Checkov or tfsec

Compensation and benefits:

• Paid leave
• Flexible hours
• Remote work allowed
• Commuting allowance paid in full

Applications are reviewed on a rolling basis.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Furrowset Cyber.