Security Engineer - Cloud Security

About us

Since 2018, growth has come by referral, mostly from auditors and insurance brokers.

What this job is

We are adding a Security Engineer - Cloud Security to our operations team. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. The company is based in Vancouver, the US. The team is spread across multiple countries. You will be employed through our employer-of-record partner in Pakistan, with a local contract and salary paid in Pakistani rupees. You will need at least 3 hours of overlap with US Pacific time.

What you'll do

Automate security checks in CI/CD pipelines. Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic. Own secrets management, key rotation and KMS policies. Write secure coding guidelines and run developer training. Coordinate external penetration tests and track remediation.

About you

3+ years in security engineering, application security or a related engineering role. Experience with SIEM, EDR or vulnerability management tools. Programming or scripting ability in Python, Go or similar.

Also helpful

Running a bug bounty program.

Perks and benefits

PKR 380,000 - PKR 440,000 a month

Co-working space stipend. Company laptop. Monthly internet allowance. Annual learning budget.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at HJC Threat Labs LLC.