Lead Security Engineer

The role:

This role opened up after a team member moved internally. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. We are headquartered in Youngstown and have been hiring remotely since 2020. You will be employed through our employer-of-record partner in Australia, with a local contract and salary paid in local currency. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET.

In this role you will:

• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Automate security checks in CI/CD pipelines
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Triage bug bounty reports from HackerOne or Bugcrowd
• Coordinate external penetration tests and track remediation
• Assess third-party vendors and SaaS integrations for security risk

You'll need:

• 7+ years in security engineering, application security or a related engineering role
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Hands-on cloud security experience in AWS, Azure or GCP

Desirable:

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Malware analysis or digital forensics background
• Contributions to security tools or published CVEs

What we offer:

Pay: $235,000 - $285,000 per year

• 20 days paid time off
• Annual team retreat
• Annual salary review
• Paid sick days
• Public holidays observed per your country

Who we are:

Public sector agencies, utilities and large health systems licence our asset management platform under multi-year contracts. We run one of the larger SaaS platforms for commercial insurance carriers, processing millions of policy transactions a year. Founded in 2008, we now have 230 employees.

Applications close when we find the right person, so get in early.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Heatherward Labs.