Security Engineer - Product Security

ABOUT CASTELL SECURITY:

Since 2024, growth has come by referral, mostly from auditors and insurance brokers. We are 20 people, all hands-on, and the founders still run engagements themselves. SOC analysts work 12-hour shifts on a 2-2-3 rotation.

WHAT THIS JOB IS:

Castell Security has an opening for a Security Engineer - Product Security. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. Remote, open to candidates across India.

WHAT YOU'LL DO:

• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Coordinate external penetration tests and track remediation.
• Assess third-party vendors and SaaS integrations for security risk.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.

WHAT YOU BRING:

• 3+ years in security engineering, application security or a related engineering role.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.
• Good judgment on risk: knowing what to fix now and what can wait.
• Ability to explain security issues to engineers without lecturing them.
• Hands-on cloud security experience in AWS, Azure or GCP.

PLUSES:

• Running a bug bounty program.
• IaC scanning with Checkov or tfsec.

WHAT YOU GET:

• Health insurance for you and your family.
• Provident fund.
• Gratuity.
• Flexible hours.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Castell Security.