Security Engineer

The company

Most engagements start with a vulnerability scan and a tabletop exercise with the client's leadership. Our managed detection and response service is built on CrowdStrike, SentinelOne and Microsoft Defender. We started in 2017 and have grown to about 200 people. Lab time is built into the schedule, not squeezed in after hours.

Lowcountry Cyber is hiring for the Security Engineer role to secure our cloud infrastructure and the applications that run on it. Remote, open to candidates across the US. We keep meetings to a minimum and work mostly async.

Duties

• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Respond to security incidents and lead the technical investigation
• Automate security checks in CI/CD pipelines
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Write secure coding guidelines and run developer training

Skills and experience

• 3+ years in security engineering, application security or a related engineering role
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Programming or scripting ability in Python, Go or similar

Pluses

• IaC scanning with Checkov or tfsec

What you get

The salary range for this role is $138,000 - $183,000 annually. This range reflects base salary only.

• Health insurance
• 401(k) with a 100% match up to 5%
• Paid time off
• $1,000 home office setup budget
• Cell phone reimbursement
• Paid holidays

Lowcountry Cyber provides equal employment opportunities to all employees and applicants.

Start dates are flexible, usually within a few weeks of an offer.

Interview process: a phone call, a meeting with the hiring manager, and a final conversation with the team.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Lowcountry Cyber LLC.