Junior Security Engineer

Our bench is in the back of a strip-mall storefront, where we image laptops and swap failed drives. Every tech does a bit of everything, from printer jams to firewall rules. Lunch is usually whatever is closest to the client site.

About the role:

This role opened up after a team member moved internally. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Our headquarters is in Lawton, and about a third of the team works remotely from other countries. This is a full-time remote role. We use an employer of record in Uruguay, so you get a proper employment contract, not a freelance agreement. You will need at least 4 hours of overlap with US Central time. Clear written English is a must, as the team works across time zones.

Essential duties and responsibilities:

• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Assess third-party vendors and SaaS integrations for security risk.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Automate security checks in CI/CD pipelines.
• Own secrets management, key rotation and KMS policies.

Skills and experience:

• 0-2 years in security engineering, application security or a related engineering role.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Programming or scripting ability in Python, Go or similar.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Perks and benefits:

Salary range: UYU 155,000 - UYU 185,000 monthly

• Company laptop.
• Wellness allowance.
• Annual salary review.
• 20 days paid time off.
• Monthly internet allowance.

We will only contact shortlisted applicants.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at LBJ Business Technology.