Job Description

• 7+ years of experience in information security, application security, or infrastructure security.
• Strong knowledge of:
  • Network security fundamentals (TCP/IP, firewalls, VPN, proxies)
  • Web/app security (OWASP Top 10, API security, authentication/authorization)
  • Cloud security (AWS, Azure, or GCP)
  • CI/CD and DevSecOps practices
• Hands-on experience with tools such as:
  • SAST/DAST/SCA tools (SonarQube, Checkmarx, Veracode, Burp Suite)
  • Vulnerability scanners (Nessus, Qualys, OpenVAS)
  • SIEM/EDR (Splunk, Sentinel, CrowdStrike)
  • Container/Kubernetes security (Trivy, Aqua, Falco)
• Knowledge of secure coding practices in at least one language (Python, Java, Go, JavaScript, etc.).
• Strong analytical, problem-solving, and communication skills.
• Nice-to-Have
• Certifications: CEH, OSCP, CISSP, CCSP, GSEC, GCIH.
• Experience with automation (Python, Bash, Terraform).
• Experience with Zero Trust architecture and SSO solutions.

• Exposure to threat intelligence and red/blue team operations.
  
  

  Compensation, Benefits and Duration

  Minimum Compensation: USD 41,000
  
  Maximum Compensation: USD 145,000
  
  Compensation is based on actual experience and qualifications of the candidate. The above is a reasonable and a good faith estimate for the role.
  
  Medical, vision, and dental benefits, 401k retirement plan, variable pay/incentives, paid time off, and paid holidays are available for full time employees.
  
  This position is not available for independent contractors
  
  No applications will be considered if received more than 120 days after the date of this post