Principal Security Engineer

The position:

Looking for a Principal Security Engineer who wants to stay somewhere for a while. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. This is a long-term contractor role, paid monthly in USD. Core hours are 10:00 to 15:00 CET. We use Slack, Notion and Google Meet. Cameras on for team calls.

In this role you will:

• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Own secrets management, key rotation and KMS policies.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Respond to security incidents and lead the technical investigation.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Review code and pull requests for security issues.

Requirements:

• 7+ years in security engineering, application security or a related engineering role.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Experience with SIEM, EDR or vulnerability management tools.
• Programming or scripting ability in Python, Go or similar.
• Good judgment on risk: knowing what to fix now and what can wait.

Benefits:

Compensation: $4,500 - $5,500/month

• Monthly internet allowance.
• Annual rate review.

About the company:

Mayhew IT is a small IT shop: the owner, four technicians and a part-time office manager.

The posting will close once we have a strong shortlist.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Mayhew IT ApS.