Security Engineer

About HJC Threat Labs:

Since 2018, growth has come by referral, mostly from auditors and insurance brokers.

What this job is:

We are adding a Security Engineer to our operations team. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. Contract role, full-time hours, paid in USD at the end of each month. Our standups are at 9:00 AM Pacific. Equipment is provided, including a laptop.

What you'll do:

• Own secrets management, key rotation and KMS policies
• Triage bug bounty reports from HackerOne or Bugcrowd
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Review code and pull requests for security issues

What we're looking for:

• 2+ years in security engineering, application security or a related engineering role
• Ability to explain security issues to engineers without lecturing them
• Good judgment on risk: knowing what to fix now and what can wait

Desirable:

• Running a bug bounty program

What you get:

$1,550 - $1,900 monthly

• Long-term engagement
• Paid in USD
• Monthly payments via wire transfer or Wise

Shortlisted candidates will hear from us within two weeks.

Duration: 3 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at HJC Threat Labs LLC.