Senior Security Engineer

About us:

We make a web-based inventory and purchasing system used by independent restaurants, breweries and small food manufacturers. Code review is required on every pull request, and nobody merges their own changes.

The role:

Looking for a Senior Security Engineer who wants to stay somewhere for a while. This hire will run our application security program: threat modeling, code scanning, pen test follow-up and developer guidance.

What you'll work on:

• Triage bug bounty reports from HackerOne or Bugcrowd.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Write secure coding guidelines and run developer training.
• Own secrets management, key rotation and KMS policies.

You have:

• 5+ years in security engineering, application security or a related engineering role.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Familiarity with SOC 2, ISO 27001, PCI DSS or HIPAA requirements.
• Hands-on cloud security experience in AWS, Azure or GCP.

Compensation and benefits:

Starting pay: $235,000 - $285,000 per year, depending on experience and certifications.

• Medical, dental and vision insurance.
• 401(k) with 4% match.
• Paid holidays.
• Professional development budget.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Brookside Apps.