Security Engineer

Company overview

Our engineering group is split into roughly 60 product teams, each owning its services end to end, with on-call shared across time zones. Annual releases gave way to two-week sprints years ago, and the platform now handles over 200 million API calls a day. Founded in 2006, we now have 300 employees.

Celtic Technologies has an opening for a Security Engineer. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. This role is remote. Please make sure you have a quiet place to work and a solid internet connection.

Day to day

• Triage bug bounty reports from HackerOne or Bugcrowd.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Automate security checks in CI/CD pipelines.
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Own secrets management, key rotation and KMS policies.

What we're looking for

• Programming or scripting ability in Python, Go or similar.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Pluses

• Malware analysis or digital forensics background.

What you get

• Health insurance for you and your family.
• Pension contribution.
• 23 days annual leave plus bank holidays.
• Income protection.

We may close the vacancy early if we receive a high number of applications.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Celtic Technologies.