Security Engineer, Detection and Response

Annual releases gave way to two-week sprints years ago, and the platform now handles over 200 million API calls a day. Public sector agencies, utilities and large health systems license our asset management platform under multi-year contracts. Releases go out Tuesday mornings, never on Fridays.

Overview

The role is new and comes from growth in our client base. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote, open to candidates across the US. We keep meetings to a minimum and work mostly async.

Responsibilities

Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security. Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic. Design and maintain SSO, MFA and conditional access with Okta or Entra ID. Assess third-party vendors and SaaS integrations for security risk. Triage bug bounty reports from HackerOne or Bugcrowd. Coordinate external penetration tests and track remediation. Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub. Automate security checks in CI/CD pipelines.

Minimum qualifications

3+ years in security engineering, application security or a related engineering role. Good judgment on risk: knowing what to fix now and what can wait. Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0). Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements. Ability to explain security issues to engineers without lecturing them. Experience with SIEM, EDR or vulnerability management tools.

Nice to have

OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500). Kubernetes and container security (Falco, OPA Gatekeeper). Running a bug bounty program.

Expected salary range: $162,000 - $205,000/year, plus bonus eligibility.

Compensation and benefits

Health insurance. 401(k) with company match. 11 paid holidays. Tuition reimbursement. Flexible schedule.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at LT Cloud.