Junior Security Engineer

We run one of the larger SaaS platforms for commercial insurance carriers, processing millions of policy transactions a year. More than 9,000 organizations use our HR and payroll suite, from regional hospitals to school districts.

About the role

Our team is growing and we are hiring a Junior Security Engineer. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Fully remote. You can work from anywhere in the US. Monday to Friday, regular working hours, flexible start and finish. We send you a laptop and the accessories you need on day one.

Duties

• Own secrets management, key rotation and KMS policies
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Triage bug bounty reports from HackerOne or Bugcrowd
• Coordinate external penetration tests and track remediation
• Run threat modeling sessions with engineering teams on new features and architecture changes
• Review code and pull requests for security issues

Required qualifications

• 0-2 years in security engineering, application security or a related engineering role
• Hands-on cloud security experience in AWS, Azure or GCP
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Ability to explain security issues to engineers without lecturing them

Preferred

• IaC scanning with Checkov or tfsec
• Contributions to security tools or published CVEs
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

Starting pay: $138,000 - $160,000 annually, depending on experience and certifications.

Why work with us

• Health savings account (HSA) with employer contribution
• 401(k) with 4% match
• 12 weeks of paid parental leave
• Home office stipend
• Vision insurance
• Cell phone reimbursement
• Short- and long-term disability

We are an equal opportunity employer. If you need an accommodation during the application process, let us know.

Please include a short note on why this role interests you.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Kestrelscale LLC.