Senior Security Engineer

We operate security operations centres on three continents, so alerts are triaged by analysts on day shift wherever they arrive. Over 1,600 employees work across sales, engineering, consulting and the SOC. Nobody gets in trouble for clicking a test phish. You report it and move on.

Role overview

Purba Cyber has an opening for a Senior Security Engineer. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. The Cloud Security team is small and hands-on. We need someone who writes code and automation, not just policy. Fully remote. You can work from anywhere in Bangladesh. We do not have many meetings. Most updates happen in writing. We use Slack, Notion and Google Meet. Cameras on for team calls.

Main duties

• Respond to security incidents and lead the technical investigation
• Assess third-party vendors and SaaS integrations for security risk
• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Own secrets management, key rotation and KMS policies

Qualifications

• 6+ years in security engineering, application security or a related engineering role
• Hands-on cloud security experience in AWS, Azure or GCP
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities
• Programming or scripting ability in Python, Go or similar
• Experience with SIEM, EDR or vulnerability management tools
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Ability to explain security issues to engineers without lecturing them

Nice to have

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Malware analysis or digital forensics background

Rate: BDT 115,000 - BDT 135,000 pcm

Compensation and benefits

• Medical insurance
• Provident fund
• Paid leave

We are reviewing applications as they arrive, so apply early.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Purba Cyber Ltd..