Security Engineer II

About the company

Most of what we build is back-office software for property managers, including lease tracking, work orders and tenant payments. The product is a mobile app plus a React web dashboard, with a Python and PostgreSQL backend on AWS. Founded in 2003, we now have 110 employees.

We have an immediate opening for a Security Engineer II in Lafayette. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance.

Key responsibilities

• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Run threat modeling sessions with engineering teams on new features and architecture changes.
• Coordinate external penetration tests and track remediation.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.

Skills and experience

• 3+ years in security engineering, application security or a related engineering role.
• Good judgment on risk: knowing what to fix now and what can wait.
• Programming or scripting ability in Python, Go or similar.

Benefits

• Health insurance.
• 401(k) with company match.
• Paid sick leave.

Lafayette Software is an Equal Opportunity Employer, including disability and protected veteran status.

New hires usually start two to three weeks after accepting an offer.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Lafayette Software.