Senior Information Security Engineer

About us:

Most engagements start with a vulnerability scan and a tabletop exercise with the client's leadership. Our managed detection and response service is built on CrowdStrike, SentinelOne and Microsoft Defender. We started in 2017 and have grown to about 200 people. Lab time is built into the schedule, not squeezed in after hours.

What this job is:

We are adding headcount to this team, so this is a new seat. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance. Remote, open to candidates across the US.

Day to day:

• Assess third-party vendors and SaaS integrations for security risk.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Run threat modeling sessions with engineering teams on new features and architecture changes.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.

Requirements:

• 7+ years in security engineering, application security or a related engineering role.
• Good judgment on risk: knowing what to fix now and what can wait.
• Programming or scripting ability in Python, Go or similar.
• Experience with SIEM, EDR or vulnerability management tools.

Preferred qualifications:

• Kubernetes and container security (Falco, OPA Gatekeeper)
• Running a bug bounty program.
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)

Why work with us:

Starting pay: $177,000 - $220,000 per year, depending on experience and certifications.

• Health insurance.
• 401(k) with a 100% match up to 5%.
• Paid holidays.
• Cell phone reimbursement.
• Three weeks of PTO to start.
• Life insurance.
• Dental insurance.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Lowcountry Cyber LLC.