IT Security Engineer, Roomex

• 3+ years experience performing penetration testing (against web applications)
• Experience securing cloud-based infrastructures and solutions
• Previous experience working on an information security team
• Advanced knowledge of common security vulnerabilities (OWASP) and best practices
• Familiarity with SOC II controls and how to review them
• Experience in other technical roles (SysAdmin, Helpdesk, etc.)
• Strong understanding of Linux server environments
• Experience with Kanban and Agile DevOps workflows
• A good attitude and willingness to learn - you'll be with great people. You're welcome

Desirable

• As our Security Engineer, you'll responsible for managing our security posture as well as keeping our application safe from external threats
• Our ideal Security Engineer will to be able to manage IT-related security issues, such as firewall management, HIDS/HIPS configuration, log monitoring, and audit compliance (SOC II)
• You will ensure that our software application is both manually and automatically pentested for security vulnerabilities (both Red Team and Blue Team exercises), and be a decision maker in all things security management - able to "pull the plug" on a feature, application, or other business function if it represents a significant risk to the company
• Conduct penetration tests against web applications infrastructure
• Validate security on new hardware and software infrastructure
• Assist front-line company representatives with security questions
• Manage firewall rules and internal pentesting
• Manage SOC II controls and external pentesting
• Manage priorities through backlog management system (Jira)
• Come to work, do great things, then go home!