Senior Information Security Engineer (Cloud Security)

Who we are

Since 2006, growth has come by referral, mostly from auditors and insurance brokers. Clients are mostly credit unions, medical groups and municipal governments in North Carolina.

About the role

Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. Pendle Security is hiring for the Senior Information Security Engineer (Cloud Security) role to secure our cloud infrastructure and the applications that run on it. Fully remote. You can work from anywhere in the US. Normal working hours, Monday to Friday.

In your first few months you will

• Coordinate external penetration tests and track remediation.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Own secrets management, key rotation and KMS policies.
• Assess third-party vendors and SaaS integrations for security risk.
• Respond to security incidents and lead the technical investigation.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.

What we're looking for

• 7+ years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Ability to explain security issues to engineers without lecturing them.
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements.

Preferred

• Contributions to security tools or published CVEs.

Pay and benefits

Salary range: $189,000 to $225,000 per year

• Health, dental and vision coverage starting on day one.
• 401(k) with company match.
• Paid sick leave.
• Profit sharing.
• Referral program.

Agencies: please do not contact us about this role.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Pendle Security Inc..