Senior Information Security Engineer

Enterprise clients outsource service desk, end-user support and data center operations to us under multi-year contracts. Large rollouts are routine here, such as imaging 12,000 laptops for a state agency over one summer. Tickets live in ConnectWise and everyone logs time to the quarter hour.

Our team is growing and we are hiring a Senior Information Security Engineer. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Remote position. Most of the team is in Houston, but nobody is required to come in. Monday to Friday, regular working hours, flexible start and finish. Day-to-day communication is in Slack and Google Meet.

RESPONSIBILITIES

• Respond to security incidents and lead the technical investigation
• Run threat modeling sessions with engineering teams on new features and architecture changes
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security
• Triage bug bounty reports from HackerOne or Bugcrowd
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub

REQUIRED QUALIFICATIONS

• 5+ years in security engineering, application security or a related engineering role
• Ability to explain security issues to engineers without lecturing them
• Hands-on cloud security experience in AWS, Azure or GCP
• Programming or scripting ability in Python, Go or similar

ALSO HELPFUL

• Running a bug bounty program
• IaC scanning with Checkov or tfsec
• Contributions to security tools or published CVEs

COMPENSATION AND BENEFITS

Starting pay: $225,000 - $270,000 per year, depending on experience and certifications.

• Medical, dental and vision insurance
• 401(k) with 4% match
• Three weeks of PTO to start
• Referral program
• Employee discount
• Gym membership reimbursement

We are an equal opportunity employer. If you need an accommodation during the application process, let us know.

We read every application and reply within about a week.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at DJH Networks Inc..