Security Engineer - Detection and Response

About us

Our managed detection and response service is built on CrowdStrike, SentinelOne and Microsoft Defender. The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk.

What this job is

This is a newly created position. The Detection and Response team is small and hands-on. We need someone who writes code and automation, not just policy. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. We are headquartered in Vancouver and have been hiring remotely since 2020. You will be employed through our employer-of-record partner in the US, with a local contract and salary paid in USD. Our standups are at 9:00 AM Pacific.

In your first few months you will

• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Coordinate external penetration tests and track remediation
• Respond to security incidents and lead the technical investigation
• Assess third-party vendors and SaaS integrations for security risk
• Own secrets management, key rotation and KMS policies
• Triage bug bounty reports from HackerOne or Bugcrowd
• Run threat modeling sessions with engineering teams on new features and architecture changes

What you bring

• 2+ years in security engineering, application security or a related engineering role
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Programming or scripting ability in Python, Go or similar

Compensation and benefits

Pay range: $130,000 - $169,000/year. Final offer will depend on experience.

• Monthly internet allowance
• Flexible hours
• Health insurance through our employer-of-record partner
• Annual learning budget
• Home office setup budget
• Company laptop

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Vancouver Threat Labs.