Security Engineer

Job summary:

The previous person in this role moved to another team. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. You will join as an independent contractor on a long-term agreement. Payment is monthly in USD. You will need at least 4 hours of overlap with US Central time.

What you'll be doing:

• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic

Who you are:

• 2-4 years in security engineering, application security or a related engineering role
• Good judgment on risk: knowing what to fix now and what can wait
• Experience with SIEM, EDR or vulnerability management tools

Nice to have:

• Kubernetes and container security (Falco, OPA Gatekeeper)
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

Pay and benefits:

• Long-term engagement
• Flexible hours

Who we are:

Based in San Antonio, Plinth Security also trains client staff and runs simulated phishing campaigns. Clients come to us for SOC 2, HIPAA and PCI DSS readiness, policy writing and audit support.

Due to the number of applications, only shortlisted candidates will be contacted.

Duration: 9 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Plinth Security.