Security Engineer (Detection and Response)

About Ryeport Labs:

Certifications across the team include OSCP, GPEN and CISSP. Our lab is a back room full of test hardware, old routers and a rack of virtual machines. Nobody gets in trouble for clicking a test phish. You report it and move on.

What this job is:

We are adding a Security Engineer (Detection and Response) to our operations team. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. Remote position. Most of the team is in Vancouver, but nobody is required to come in. Standard office hours, Monday to Friday, with flexibility around them. We ship you a laptop and accessories before your first day.

In your first few months you will:

Automate security checks in CI/CD pipelines. Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security. Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint. Triage bug bounty reports from HackerOne or Bugcrowd. Assess third-party vendors and SaaS integrations for security risk. Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub. Coordinate external penetration tests and track remediation.

Requirements:

3+ years in security engineering, application security or a related engineering role. Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements. Good judgment on risk: knowing what to fix now and what can wait. Ability to explain security issues to engineers without lecturing them.

Preferred:

Running a bug bounty program. IaC scanning with Checkov or tfsec.

Compensation and benefits:

Pay: $145,000 to $176,000 per year

Health, dental and vision coverage starting on day one. 401(k) with 4% match. Paid sick leave. 11 paid holidays. Life insurance. Flexible schedule.

Start dates are flexible, usually within a few weeks of an offer.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Ryeport Labs Inc..