Senior Cyber Security Engineer, Detection and Response

About Ashgrove Software:

Our main product is a payroll and timekeeping app for hourly workforces, sold by subscription and supported from Chicago. The product is a mobile app plus a React web dashboard, with a Python and PostgreSQL backend on AWS. Laptops are MacBook Pros, and you pick your own editor.

The role:

Ashgrove Software is looking for a Senior Cyber Security Engineer, Detection and Response to join a small, steady team. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. This is a full-time remote role. We use an employer of record in India, so you get a proper employment contract, not a freelance agreement. You will need at least 4 hours of overlap with US Central time. A stable internet connection and a backup power option are required.

What you'll do:

• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Triage bug bounty reports from HackerOne or Bugcrowd
• Coordinate external penetration tests and track remediation
• Review code and pull requests for security issues
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint

What you bring:

• 5+ years in security engineering, application security or a related engineering role
• Good judgment on risk: knowing what to fix now and what can wait
• Programming or scripting ability in Python, Go or similar
• Ability to explain security issues to engineers without lecturing them
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Desirable:

• Contributions to security tools or published CVEs
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

What we offer:

• Annual learning budget
• 24 days paid time off
• Co-working space stipend
• Health insurance through our employer-of-record partner

Candidates must be eligible to work in India.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Ashgrove Software LLC.