Lead Security Engineer

We are adding a Lead Security Engineer to our Application Security team. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Our team is spread across 8 countries. Headquarters is in Phoenix. We hire in Bangladesh through an employer of record, so this is a regular full-time job with local payroll and statutory benefits. You will need at least 4 hours of overlap with US Central time.

Duties

• Assess third-party vendors and SaaS integrations for security risk.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Respond to security incidents and lead the technical investigation.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Write secure coding guidelines and run developer training.

Requirements

• 7+ years in security engineering, application security or a related engineering role.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Bonus points

• Running a bug bounty program.

Why work with us

• Paid parental leave.
• Paid sick days.
• Flexible hours.
• Public holidays observed per your country.
• Company laptop.
• Annual salary review.

About us

Annual revenue from managed services has grown every year since 1984. Pebblegrid protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Pebblegrid LLC.