Security Engineer

Who we are

Based in San Antonio, Plinth Security also trains client staff and runs simulated phishing campaigns. Clients come to us for SOC 2, HIPAA and PCI DSS readiness, policy writing and audit support.

The role

Plinth Security is hiring a Security Engineer to work remotely from Sweden. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Our team is spread across 9 countries. Headquarters is in San Antonio. Employment is through our payroll partner in Sweden. Salary is paid monthly in local currency. You will need at least 4 hours of overlap with US Central time. We use Slack, Notion and Google Meet. Cameras on for team calls.

In your first few months you will

• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Own secrets management, key rotation and KMS policies
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Review code and pull requests for security issues
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID

What we're looking for

• 2+ years in security engineering, application security or a related engineering role
• Hands-on cloud security experience in AWS, Azure or GCP
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Ability to explain security issues to engineers without lecturing them

Nice to have

• Contributions to security tools or published CVEs

Compensation and benefits

• Stock options
• Annual salary review
• Annual team retreat
• Monthly internet allowance
• Flexible hours
• Co-working space stipend

Candidates must be eligible to work in Sweden.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Plinth Security.