Senior Information Security Engineer - Infrastructure Security

Who we are

Most of what we build is back-office software for property managers, including lease tracking, work orders and tenant payments. Pinfold Systems builds scheduling and dispatch software for field service companies, from two-truck plumbing outfits to regional HVAC contractors. Laptops are MacBook Pros, and you pick your own editor.

About the role

Pinfold Systems has an opening for a Senior Information Security Engineer - Infrastructure Security. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance. Remote, open to candidates across the US.

What you'll work on

• Run threat modeling sessions with engineering teams on new features and architecture changes.
• Assess third-party vendors and SaaS integrations for security risk.
• Review code and pull requests for security issues.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Automate security checks in CI/CD pipelines.

What we're looking for

• 6+ years in security engineering, application security or a related engineering role.
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements.
• Experience with SIEM, EDR or vulnerability management tools.
• Programming or scripting ability in Python, Go or similar.
• Good judgment on risk: knowing what to fix now and what can wait.
• Hands-on cloud security experience in AWS, Azure or GCP.

Benefits

Pay range: $191,000 - $235,000 annually. Final offer will depend on experience.

• Health insurance.
• 401(k) with company match.
• Three weeks of PTO to start.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Pinfold Systems.