Security Engineer I (Cloud Security)

About us:

Most engagements start with a vulnerability scan and a tabletop exercise with the client's leadership. The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk. Nobody gets in trouble for clicking a test phish. You report it and move on.

The role:

Bulwark Cybersecurity is looking for a Security Engineer I (Cloud Security) to join a small, steady team. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote, open to candidates across the US. Normal working hours, Monday to Friday.

What you'll do:

• Run threat modeling sessions with engineering teams on new features and architecture changes
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Triage bug bounty reports from HackerOne or Bugcrowd
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub

Requirements:

• 0-2 years in security engineering, application security or a related engineering role
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements
• Good judgment on risk: knowing what to fix now and what can wait
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Ability to explain security issues to engineers without lecturing them
• Programming or scripting ability in Python, Go or similar

Preferred:

• IaC scanning with Checkov or tfsec
• Running a bug bounty program

Compensation and benefits:

Pay range: $107,000 - $135,000 a year. Final offer will depend on experience.

• Medical, dental and vision insurance
• 401(k) with company match
• Paid time off
• Professional development budget
• Employee assistance program

This position requires a background check.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Bulwark Cybersecurity.