Security Engineer, Application Security

Over 720 employees work across sales, engineering, consulting and the SOC. Annual revenue from managed services has grown every year since 1992. Background checks are required, and some client work requires a government clearance.

Position summary:

Everard Secure is looking for a Security Engineer, Application Security to join a small, steady team. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance. The Cloud Security team is small and hands-on. We need someone who writes code and automation, not just policy. Remote, open to candidates across the US. You can set your own hours around a daily morning check-in.

What you'll be doing:

• Own secrets management, key rotation and KMS policies.
• Write secure coding guidelines and run developer training.
• Review code and pull requests for security issues.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Automate security checks in CI/CD pipelines.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.

What you need:

• 2-4 years in security engineering, application security or a related engineering role.
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements.
• Programming or scripting ability in Python, Go or similar.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Good judgment on risk: knowing what to fix now and what can wait.

Preferred qualifications:

• Malware analysis or digital forensics background.
• Running a bug bounty program.

$153,000 - $177,000 a year

What you get:

• Health insurance.
• 401(k) with 4% match.
• 11 paid holidays.
• Annual bonus.
• Professional development budget.

Everard Secure is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

This position requires a background check.

We are not working with agencies on this role.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Everard Secure LLC.