Backend Engineer, Security

Openkrill; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Stock options

Remote work option

Learning budget

Volunteer opportunities

Travel opportunities

Job summary

Eneba is seeking a Security Engineer to join our growing security team. You’ll do hands-on security work, incident response, threat hunting, and policy development while learning Eneba’s tech stack and services.

In your first months you’ll learn how our systems fit together, review submissions, triage incidents, and drive remediation while communicating risk clearly to non-technical colleagues. You’ll collaborate across languages and technologies as the role evolves.

Qualifications

• Strong written and verbal communication essential
• Solid PHP knowledge
• Security knowledge or clearly demonstrated interest in security (bug bounties, CTFs, security blogs)
• Background in IT, backend engineering, or related technical field
• Self-sufficiency and ownership mentality
• Openness to learning and working across multiple systems/languages

Responsibilities

• Hands-on coding and security implementation work
• Review and triage security submissions and incident reports
• Evaluate and respond to bug bounty reports, including remediation follow-through
• Build, operate, and improve incident response and remediation processes
• Write and maintain security policies and documentation
• Communicate security requirements and risks clearly to non-technical departments
• Review application monitoring and logs to catch and investigate anomalies
• Support access governance and permission-management processes

Skills

PHP

Security

Backend engineering

Communication

Ownership

Self-sufficiency

Learning mindset

Tools

Kubernetes

AWS

Terraform

GraphQL

gRPC

InfluxDB

Redis

ElasticSearch

MariaDB

MySQL

PHP/Symfony

Golang

Job description

ABOUT ENEBA

At Eneba, we’re building an open, safe and sustainable marketplace for the gamers of today and tomorrow. Our marketplace supports close to 20m+ active users (and growing fast!), provides a level of trust, safety and market accessibility unparalleled to none. We’re proud of what we’ve accomplished in such a short time and look forward to sharing this journey with you. Join us as we continue to scale, diversify our portfolio, and grow with the evolving community of gamers.

ABOUT YOUR TEAM

You will join a growing security team where you can take meaningful ownership of the practices and policies you help develop. You will work closely with backend engineering and other departments to integrate practical security requirements across the company.

ABOUT THE ROLE

As a Security Engineer, you'll cover a broad range of operational and strategic security work rather than a single narrow specialty. In your first few months, you'll focus on learning Eneba's tech stack and understanding how our services and systems fit together. That foundation is essential before you can secure those systems effectively.

Day-to-day, you can expect to:

• Hands-on coding and security implementation work make up the largest part of the role today, alongside incident response and threat-hunting responsibilities.
• Review and triage security submissions and incident reports.
• Evaluate and respond to bug bounty reports, including remediation follow-through
• Build, operate, and improve incident response and remediation processes.
• Write and maintain security policies and documentation.
• Communicate security requirements and risks clearly to non-technical departments
• Review application monitoring and logs to catch and investigate anomalies
• Support access governance and permission-management processes.

ABOUT THE TECH

The tech stack is the same one our backend teams work with. You're not expected to know all of it on day one, but you should expect to be learning how to use most of it within your first 3 months, and you'll also be working across other languages and systems used throughout the company as your role demands.

CODE

• PHP/Symfony
• Golang
• GraphQL
• gRPC
• CQRS, commands via saga/temporal, queries via GraphQL
• Microservices architecture
• Service orchestration with Saga https://microservices.io/patterns/data/saga.html / temporal.io https://temporal.io/

DATABASES

• InfluxDB
• Redis
• ElasticSearch
• MariaDB
• MySQL

INFRASTRUCTURE

• Kubernetes
• Helm
• AWS
• Terraform
• Prometheus

WHAT WE'RE LOOKING FOR

• Strong written and verbal communication skills - this is our highest priority, since you'll regularly need to explain technical risk to non-technical audiences
• Solid PHP knowledge
• Security knowledge, or a clearly demonstrated interest in security (bug bounties, CTFs, security blogs, following the security community)
• A background in IT, backend engineering, or a related technical field
• Self-sufficiency - comfort taking ownership of tasks and making progress without constant guidance.
• Ownership mentality and strong problem-solving skills
• Openness to learning and working across multiple systems, languages, and technologies rather than staying in one lane

Nice to have

• Experience with monitoring tools and application monitoring
• Familiarity with the OWASP Top 10

WHAT IT’S LIKE TO WORK AT ENEBA

• Opportunity to join our Employee Stock Options program.
• Opportunity to help scale a unique product.
• Various bonus systems: performance-based, referral, additional paid leave, personal learning budget.
• Paid volunteering opportunities.
• Work location of your choice: office, remote, opportunity to work and travel.
• Personal and professional growth at an exponential rate supported by well-defined feedback and promotion processes.

*To find out about how we handle your personal data, make sure to check out our Candidate Privacy Notice https://www.eneba.com/candidate-privacy-notice