Associate Security Engineer

🕒 vor 4 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Bridgeway Benefit Technologies

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

☁️ SaaS

👥 HR Tech

SaaS • HR Tech

Bridgeway Benefit Technologies ist ein Unternehmen, das sich auf die Verbesserung von Lösungen zur Verwaltung von Sozialleistungen spezialisiert hat. Es bietet Software- und Technologiedienstleistungen an, um die Verwaltung von Mitarbeiterleistungen für Unternehmen und Organisationen zu verbessern und zu rationalisieren. Das Unternehmen hat zum Ziel, die Administration von Sozialleistungen durch seine Suite von technologischen Werkzeugen effizienter und benutzerfreundlicher zu gestalten.

Beschreibung

• Assist in designing and implementing scalable and reliable security solutions with guidance from senior engineers. • Assist in developing and implementing infrastructure-as-code (IaC) solutions to enforce security policies and automate cloud configurations. • Support the maintenance and enhancement of CI/CD pipelines, automate repetitive tasks, and help improve system efficiency. • Collaborate closely with development and platform engineering teams to support their security needs. • Actively seek mentorship from senior engineers and share learnings with peers. • Complete smaller tasks independently and contribute to mid-level and larger-scale security projects with senior guidance. • Assist in maintaining SIEM solutions and log ingestion pipelines to support monitoring, alerting, and threat detection. • Assist in developing incident response playbooks for various alert types and participate in related testing to help ensure operational readiness. • Monitor emerging threats and assist in operationalizing threat intelligence tools, including alert mapping using the MITRE ATT&CK framework. • Support vulnerability management and cloud security posture management, including code/dependency scanning, WAF, and DLP configurations. • Collaborate with application teams to implement enterprise app governance and mobile application management (MAM). • Assist in developing and applying hardening guidelines for cloud workstations and servers, and in reviewing firewall rules, network security groups, and domain controllers, to help ensure secure configurations. • Collaborate with product teams to integrate security into SDLC and feature design reviews. • Support the review of customer and vendor contract security clauses under senior guidance. • Assist in coordinating phishing simulations, security awareness campaigns (e.g., KnowBe4), and coaching initiatives, helping deliver guidance and training materials to employees. • Assist in coordinating third-party penetration testing efforts to support mobile and web app security. • Help maintain compliance documentation for customers and vendors, and contribute to network diagrams and dataflow documentation with other teams. • Participate in an on-call rotation, providing timely response to security incidents outside regular business hours as needed.

🎯 Anforderungen

• 1+ years of professional engineering experience and a familiarity with information security • Foundational knowledge of cloud platforms • Basic proficiency in scripting and automation • Basic understanding of version control • Intermediate proficiency with IaC and CI/CD pipeline tools • Basic understanding of containerization and orchestration concepts (e.g., ECS, ACA, K8s, Docker) • Strong analytical and troubleshooting skills with the ability to identify critical issues and escalate with recommendations • Bachelors in Information Technology, Software Development, or related field

🏖️ Vorteile

• This is a remote position with preference given to East Coast candidates.