Security Engineer

Who we are:

Based in Sylhet, Roy Technology Group also runs a small colocation rack for clients who want local backups.

Role overview:

This is a backfill for a team member who moved to another team. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This role is fully remote within Bangladesh. Clear written English is a must, as the team works across time zones.

Your responsibilities:

• Assess third-party vendors and SaaS integrations for security risk.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Coordinate external penetration tests and track remediation.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Respond to security incidents and lead the technical investigation.
• Write secure coding guidelines and run developer training.

Skills and experience:

• 3+ years in security engineering, application security or a related engineering role.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.

Why work with us:

• Medical insurance.
• Provident fund.
• Paid leave.
• Two bonuses a year.

We review applications as they come in.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Roy Technology Group Ltd..