Security Engineer

The Security Engineering team is small and hands-on. We need someone who writes code and automation, not just policy. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. We are headquartered in Sydney and have been hiring remotely since 2020. You will be employed through our employer-of-record partner in the US, with a local contract and salary paid in USD. Core hours overlap with Sydney business hours until mid-afternoon.

What you'll be doing:

• Assess third-party vendors and SaaS integrations for security risk.
• Coordinate external penetration tests and track remediation.
• Run threat modeling sessions with engineering teams on new features and architecture changes.
• Triage bug bounty reports from HackerOne or Bugcrowd.

Who you are:

• 3+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.
• Ability to explain security issues to engineers without lecturing them.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

What you get:

Compensation: $149,000 - $196,000 annually

• Performance bonus.
• Monthly internet allowance.
• Flexible hours.
• Annual team retreat.

About Galestead Data:

Our engineering group is split into roughly 60 product teams, each owning its services end to end, with on-call shared across time zones. Headquartered in Sydney since 2006, the company now sells in 40 countries and supports customers in 11 languages. We started in 2006 and have grown to about 590 people. Most engineers work remotely and come into the office one week a quarter for planning.

We are an equal opportunity employer and value diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

We review applications on a rolling basis.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Galestead Data Pty Ltd.