Senior Information Security Engineer

About us:

We are 27 people, all hands-on, and the founders still run engagements themselves.

The role:

Poplarport is looking for a Senior Information Security Engineer to join a small, steady team. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance. Remote, open to candidates across the US. Weekday working hours, with room to shift your day when needed.

In your first few months you will:

• Assess third-party vendors and SaaS integrations for security risk
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic
• Respond to security incidents and lead the technical investigation
• Write secure coding guidelines and run developer training
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Run threat modeling sessions with engineering teams on new features and architecture changes
• Review code and pull requests for security issues

What you bring:

• 7+ years in security engineering, application security or a related engineering role
• Programming or scripting ability in Python, Go or similar
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Ability to explain security issues to engineers without lecturing them
• Good judgment on risk: knowing what to fix now and what can wait
• Hands-on cloud security experience in AWS, Azure or GCP

Preferred qualifications:

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Kubernetes and container security (Falco, OPA Gatekeeper)

Perks and benefits:

$188,000 - $210,000 annually

• Health, dental and vision coverage starting on day one
• 401(k) with a 100% match up to 5%
• Paid time off

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Poplarport LLC.