Senior Cyber Security Engineer (Infrastructure Security)

Our field services team covers retail chains, hospitals and banks, dispatching technicians to over 4,000 sites. Enterprise clients outsource service desk, end-user support and data centre operations to us under multi-year contracts. Company vehicles are provided for techs who drive to client sites.

The role:

Our team is growing and we are hiring a Senior Cyber Security Engineer (Infrastructure Security). This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Our headquarters is in New York City, and about a third of the team works remotely from other countries. This is a full-time remote role. We use an employer of record in South Africa, so you get a proper employment contract, not a freelance agreement. Core hours are 9:00 AM to 1:00 PM US Eastern.

What you'll be doing:

• Respond to security incidents and lead the technical investigation
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Assess third-party vendors and SaaS integrations for security risk
• Automate security checks in CI/CD pipelines
• Triage bug bounty reports from HackerOne or Bugcrowd
• Run threat modelling sessions with engineering teams on new features and architecture changes
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security

What you need:

• 5+ years in security engineering, application security or a related engineering role
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Good judgment on risk: knowing what to fix now and what can wait
• Experience with SIEM, EDR or vulnerability management tools

Preferred:

• IaC scanning with Checkov or tfsec
• Contributions to security tools or published CVEs

What you get:

• 24 days paid time off
• Paid sick days
• Company laptop
• Performance bonus

If you are shortlisted, we will reach out to set up a first call.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Mohawk Valley Technology Group.