Security Architect

About Cedartrack:

Large incident response engagements can involve 20 or more responders working in shifts for weeks. Annual revenue from managed services has grown every year since 1995.

The position:

Cedartrack is hiring a Security Architect to work remotely from Pakistan. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. We are headquartered in Montreal and have been hiring remotely since 2020. This is a full-time remote role. We use an employer of record in Pakistan, so you get a proper employment contract, not a freelance agreement. Core hours are 9:00 AM to 1:00 PM US Eastern. A stable internet connection and a backup power option are required.

Essential duties and responsibilities:

• Automate security checks in CI/CD pipelines.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Own secrets management, key rotation and KMS policies.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.

Required qualifications:

• 8-10 years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Good judgment on risk: knowing what to fix now and what can wait.
• Ability to explain security issues to engineers without lecturing them.

Benefits:

Salary range: PKR 770,000-PKR 950,000 pcm

• Annual team retreat.
• 24 days paid time off.
• Annual learning budget.
• Public holidays observed per your country.

The posting will close once we have a strong shortlist.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cedartrack.