Ontra · 2 days ago

Security Engineer

United States

Full-time

Remote

Senior Level

$146K/yr - $204K/yr

3+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Document ManagementInformation Technology

Growth Opportunities

Insider Connection @Ontra

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Vulnerability Management: Identify and remediate security vulnerabilities across cloud and developer environments, as well as develop strategies to monitor security posture continuouslyImplement Security Tooling: Deploy security tools and collaborate with teams to integrate tooling into the development lifecycle

Risk Mitigation: Lead efforts to enhance security posture by proactively identifying and mitigating risks across cloud, code, and developer environments.

Assessment and Improvement: Conduct thorough assessments of critical systems and infrastructure, proposing and implementing updates or improvements to address emerging threats.

Collaboration and Control Strengthening: Collaborate closely with cross-functional teams to deploy and configure security controls, monitor systems, and strengthen access controls.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Security EngineeringPublic CloudAWSKubernetesEDR/XDRSIEMSASTDASTObject-Oriented ProgrammingPythonGolangRubyCI/CD PipelinesAutomated Security TestingSecurity StandardsNISTCIS BenchmarksOWASPCommunicationCollaboration

Required

3+ years in security engineering roles, with a focus on public cloud infrastructure security (preferably AWS), managing Kubernetes environments, and experience with security technologies such as EDR/XDR, SIEM, SAST, DAST.

Proficiency in object-oriented programming languages such as Python, Golang, or Ruby, along with experience in CI/CD pipelines and automated security testing.

Strong understanding of security standards and frameworks (e.g., NIST, CIS Benchmarks, OWASP).

Excellent communication and collaboration skills, with the ability to articulate complex security issues clearly to technical and non-technical stakeholders.

Bachelor’s degree in computer science, information systems, or information security, along with relevant certifications (CISSP, OSCP, CEH, etc.).