Security Engineer

About us:

We are 27 people, all hands-on, and the founders still run engagements themselves.

About the role:

Poplarport is hiring for the Security Engineer role to secure our cloud infrastructure and the applications that run on it. You can work from home anywhere in the US. We have no office requirement. Normal working hours, Monday to Friday. We use Slack, Notion and Google Meet. Cameras on for team calls.

What you'll work on:

• Respond to security incidents and lead the technical investigation.
• Review code and pull requests for security issues.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Assess third-party vendors and SaaS integrations for security risk.
• Run threat modeling sessions with engineering teams on new features and architecture changes.

Requirements:

• 3+ years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements.

Pluses:

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

Perks and benefits:

$71.00 - $84.00 an hour

• Referral program.

We are unable to sponsor visas for this position.

Duration: 12 months. Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Poplarport LLC.