Security Engineer I

About Phoenix IT

We install and support network cabling, Wi-Fi, servers and VoIP phone systems for businesses across Arizona. Certification exams are paid for, and passing one comes with a raise.

The role

Phoenix IT is looking for a Security Engineer I to join a small, steady team. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This role is fully remote within the US. Hours are flexible, with one short team call each morning. Please make sure you have a quiet place to work and a solid internet connection.

Job duties

• Run threat modeling sessions with engineering teams on new features and architecture changes
• Automate security checks in CI/CD pipelines
• Assess third-party vendors and SaaS integrations for security risk
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Coordinate external penetration tests and track remediation
• Triage bug bounty reports from HackerOne or Bugcrowd
• Write secure coding guidelines and run developer training

What we're looking for

• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Ability to explain security issues to engineers without lecturing them
• Good judgment on risk: knowing what to fix now and what can wait
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements
• Programming or scripting ability in Python, Go or similar

Why work with us

Expected salary range: $100,000 to $137,000 per year, plus bonus eligibility.

• Health, dental and vision coverage starting on day one
• 401(k) with a 100% match up to 5%
• Paid sick leave
• Professional development budget
• Profit sharing
• Paid holidays

Phoenix IT provides equal employment opportunities to all employees and applicants.

We review applications on a rolling basis.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Phoenix IT.