Senior Cyber Security Engineer

We are creating this position because the workload has grown. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Our headquarters is in Phoenix, and about a third of the team works remotely from other countries. Employment is through our payroll partner in Pakistan. Salary is paid monthly in Pakistani rupees. Core hours overlap with US Central time, 9:00 AM to 1:00 PM CT.

What you'll be doing:

• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Own secrets management, key rotation and KMS policies.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Respond to security incidents and lead the technical investigation.
• Assess third-party vendors and SaaS integrations for security risk.

About you:

• 5+ years in security engineering, application security or a related engineering role.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Ability to explain security issues to engineers without lecturing them.
• Good judgment on risk: knowing what to fix now and what can wait.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Experience with SIEM, EDR or vulnerability management tools.

Pluses:

• IaC scanning with Checkov or tfsec.

Why work with us:

Compensation: PKR 630,000 - PKR 830,000 pcm

• Monthly internet allowance.
• 24 days paid time off.
• Co-working space stipend.
• Public holidays observed per your country.
• Wellness allowance.
• Performance bonus.
• Paid parental leave.

Who we are:

Annual revenue from managed services has grown every year since 1984. Pebblegrid protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers.

Applications are reviewed on a rolling basis.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Pebblegrid LLC.