Security Engineer, Cloud Security

Who we are:

Dentists, insurance agents and law offices make up most of the client list. We started in 1995 and have grown to about 32 people.

What this job is:

This role opened up after a team member moved internally. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. This role is fully remote within India. Few meetings, lots of written updates. You need a reliable internet connection and somewhere quiet to work.

Day to day:

• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Write secure coding guidelines and run developer training.
• Review code and pull requests for security issues.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Automate security checks in CI/CD pipelines.

About you:

• 3+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Ability to explain security issues to engineers without lecturing them.

Pluses:

• Malware analysis or digital forensics background.
• Running a bug bounty program.
• Kubernetes and container security (Falco, OPA Gatekeeper)

Pay and benefits:

Salary: ₹16,50,000 to ₹19,50,000 per annum

• Health insurance for you and your family.
• Provident fund.
• Paid leave.
• Gratuity.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cedarridge IT Pvt Ltd.