Senior Cyber Security Engineer

No call centre and no offshore help desk. When clients call, one of us picks up. Our bench is in the back of a strip-mall storefront, where we image laptops and swap failed drives. Founded in 2016, we now have 18 employees. Lunch is usually whatever is closest to the client site.

Role overview:

Our team is growing and we are hiring a Senior Cyber Security Engineer. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Our headquarters is in Memphis, and about a third of the team works remotely from other countries. We hire in India through an employer of record, so this is a regular full-time job with local payroll and statutory benefits. Core hours overlap with US Central time, 9:00 AM to 1:00 PM CT. A stable internet connection and a backup power option are required.

Job duties:

• Coordinate external penetration tests and track remediation.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Respond to security incidents and lead the technical investigation.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Own secrets management, key rotation and KMS policies.

Who you are:

• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Ability to explain security issues to engineers without lecturing them.
• Good judgment on risk: knowing what to fix now and what can wait.

Preferred:

• Contributions to security tools or published CVEs.

What we offer:

• Co-working space stipend.
• Annual learning budget.
• Paid parental leave.
• Home office setup budget.
• Annual salary review.
• Equity.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Hill IT.