Cybersecurity Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the integration of security measures into the Dscout SaaS environment, ensuring security is embedded throughout the software development lifecycle.

• Work collaboratively with the Engineering team to strategize and implement cybersecurity controls that safeguard the SaaS environment, including the protection of AWS resources like VPCs, EC2 instances, and containers.

• Improve security monitoring of the SaaS environment and internal IT services by deploying SIEM solutions and enhancing logging and audit capabilities.

• Evaluate emerging threats and formulate recommendations to reduce organizational risk.

• Deliver weekly threat intelligence reports that outline potential risks to the organization.

• Investigate, contain, and address cyber attacks and associated incidents in coordination with the Engineering team.

• Conduct vulnerability monitoring and ensure appropriate remediation actions are taken.

• Engage in the development of security policies and procedures.

• Support third-party risk assessments.

• Propose ongoing improvements to security controls.

• Aid in the creation of security programs and the promotion of security awareness.

⛳️ Requirements

• Proven experience collaborating with developers to perform security reviews and deliver effective recommendations for risk management.

• Comprehensive understanding and practical application of OWASP Top 10 (web and AI).

• Experience in securing AWS cloud environments.

• Familiarity with infrastructure as code tools such as Terraform.

• Demonstrated ability to deploy security monitoring solutions like Datadog.

• Skill in identifying pertinent monitoring scenarios and ensuring adequate logging practices.

• Experience in responding to cyber threats such as bot attacks, account compromises, data breaches, and infected devices.

• Strong knowledge of cloud computing environments.

• Proficient understanding of security practices in software development and CI/CD pipelines.

• Experience in documenting and implementing security policies and procedures.

• Knowledge of ISO 27001, NIST, or SANS is preferred.

• Experience with HITRUST and/or SOC 2 certification is advantageous.

• Excellent communication, documentation, and presentation skills.

• A Bachelor’s degree is preferred.

• CISSP, CCSP, or GIAC security certification is preferred.

• At least 3 years of experience in the security field is required.

🏝️ Benefits

• A robust and competitive compensation package that includes a built-in bonus and equity program.

• An exceptional and progressive benefits package (for you and your dependents) designed to support work/life balance.

• Flexible PTO.

• 15 company holidays.

• 12 weeks of paid parental leave.

• 401k matching.

• Education stipend to foster growth and development.

• Remote work stipend.

• An open and transparent company culture.