Lead Security Engineer

The company:

Over 580 employees work across sales, engineering, consulting and the SOC. We operate security operations centres on three continents, so alerts are triaged by analysts on day shift wherever they arrive.

Mallardway is hiring for the Lead Security Engineer role to secure our cloud infrastructure and the applications that run on it. You can work from home anywhere in India. We have no office requirement. Flexible schedule. We have one team call a day, usually in the morning.

Responsibilities:

• Run threat modelling sessions with engineering teams on new features and architecture changes
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Write secure coding guidelines and run developer training
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Triage bug bounty reports from HackerOne or Bugcrowd

Skills and experience:

• 7+ years in security engineering, application security or a related engineering role
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Hands-on cloud security experience in AWS, Azure or GCP
• Good judgment on risk: knowing what to fix now and what can wait

Nice to have:

• Running a bug bounty program
• IaC scanning with Checkov or tfsec
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

Perks and benefits:

• Health insurance for you and your family
• Provident fund
• Paid leave
• Gratuity

Please submit your CV in English.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Mallardway Pvt Ltd.