Senior Cyber Security Engineer

Overview:

Our team is growing and we are hiring a Senior Cyber Security Engineer. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This is a full-time remote role. We use an employer of record in India, so you get a proper employment contract, not a freelance agreement. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET. You get a company laptop and a headset before you start.

Duties:

Run threat modelling sessions with engineering teams on new features and architecture changes. Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic. Assess third-party vendors and SaaS integrations for security risk. Triage bug bounty reports from HackerOne or Bugcrowd. Design and maintain SSO, MFA and conditional access with Okta or Entra ID.

Required qualifications:

6+ years in security engineering, application security or a related engineering role. Strong knowledge of the OWASP Top 10 and common web vulnerabilities. Good judgment on risk: knowing what to fix now and what can wait. Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0). Programming or scripting ability in Python, Go or similar.

Pay and benefits:

Rate: ₹33,00,000 to ₹40,00,000 per annum

Flexible hours. 20 days paid time off. Performance bonus. Paid sick days.

About the company:

Every report is written by the person who did the testing, not a separate writing team. Our lab is a back room full of test hardware, old routers and a rack of virtual machines.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Niagara Cyber.