Security Engineer - Infrastructure Security

Stackwell Security is a small team of former military and law enforcement analysts doing pen tests and incident response. Background checks are required, and some client work requires a government clearance.

About the role

We are adding a Security Engineer - Infrastructure Security to our operations team. The operations team is small and hands-on. We need someone who writes code and automation, not just policy. Remote within the US. We meet in person once or twice a year.

Your responsibilities

• Assess third-party vendors and SaaS integrations for security risk
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Own secrets management, key rotation and KMS policies
• Automate security checks in CI/CD pipelines
• Run threat modeling sessions with engineering teams on new features and architecture changes
• Respond to security incidents and lead the technical investigation
• Review code and pull requests for security issues

What we're looking for

• 2+ years in security engineering, application security or a related engineering role
• Good judgment on risk: knowing what to fix now and what can wait
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements
• Hands-on cloud security experience in AWS, Azure or GCP
• Programming or scripting ability in Python, Go or similar
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Why work with us

Salary: $162,000 - $183,000 per year

• Medical, dental and vision insurance
• 401(k) with 4% match
• Paid sick leave
• Dental insurance

We are not working with agencies on this role.

Applicants must be authorized to work in the U.S.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Stackwell Security.