Associate Security Engineer

Responsibilities

• Assist in designing and implementing scalable and reliable security solutions with guidance from senior engineers.
• Assist in developing and implementing infrastructure-as-code (IaC) solutions to enforce security policies and automate cloud configurations.
• Support the maintenance and enhancement of CI/CD pipelines, automate repetitive tasks, and help improve system efficiency.
• Collaborate closely with development and platform engineering teams to support their security needs.
• Actively seek mentorship from senior engineers and share learnings with peers.
• Complete smaller tasks independently and contribute to mid-level and larger-scale security projects with senior guidance.
• Affiliate with maintaining SIEM solutions and log ingestion pipelines to support monitoring, alerting, and threat detection.
• Affiliate with developing incident response playbooks for various alert types and participate in related testing to help ensure operational readiness.
• Monitor emerging threats and affiliate with operationalizing threat intelligence tools, including alert mapping using the MITRE ATT&CK framework.
• Affiliate with vulnerability management and cloud security posture management, including code/dependency scanning, WAF, and DLP configurations.
• Collaborate with application teams to implement enterprise app governance and mobile application management (MAM).
• Affiliate with developing and applying hardening guidelines for cloud workstations and servers, and in reviewing firewall rules, network security groups, and domain controllers, to help ensure secure configurations.
• Collaborate with product teams to integrate security into SDLC and feature design reviews.
• Affiliate with reviewing customer and vendor contract security clauses under senior guidance.
• Affiliate with coordinating phishing simulations, security awareness campaigns (e.g., KnowBe4), and coaching initiatives, helping deliver guidance and training materials to employees.
• Affiliate with coordinating third-party penetration testing efforts to support mobile and web app security.
• Affiliate with maintaining compliance documentation for customers and vendors, and contribute to network diagrams and dataflow documentation with other teams.
• Participate in an on-call rotation, providing timely response to security incidents outside regular business hours as needed.

Requirements

• 1+ years of professional engineering experience and a familiarity with information security.
• Foundational knowledge of cloud platforms.
• Basic proficiency in scripting and automation.
• Basic understanding of version control.
• Intermediate proficiency with IaC and CI/CD pipeline tools.
• Basic understanding of containerization and orchestration concepts (e.g., ECS, ACA, K8s, Docker).
• Strong analytical and troubleshooting skills with the ability to identify critical issues and escalate with recommendations.
• Bachelor's in Information Technology, Software Development, or related field.