Principal Security Engineer

About the company

Our managed detection and response service is built on CrowdStrike, SentinelOne and Microsoft Defender. The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk.

The position

Vancouver Threat Labs is hiring for the Principal Security Engineer role to secure our cloud infrastructure and the applications that run on it. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Our headquarters is in Vancouver, and about a third of the team works remotely from other countries. Contract role, full-time hours, paid in USD at the end of each month. Our standups are at 9:00 AM Pacific. Reliable internet and a power backup are a must.

Main duties

• Triage bug bounty reports from HackerOne or Bugcrowd.
• Write secure coding guidelines and run developer training.
• Respond to security incidents and lead the technical investigation.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Coordinate external penetration tests and track remediation.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Assess third-party vendors and SaaS integrations for security risk.

Requirements

• 8+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Benefits

• Paid time off.
• Paid in USD.

The posting will close once we have a strong shortlist.

Duration: 6 months. Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Vancouver Threat Labs.