SC Security Engineer

Hubnest Inc; United States; Híbrido; USD 140.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health coverage

Flexible working arrangements

Learning budget

Paid time off

Descripción de la vacante

Hubnest Inc. is seeking a seasoned security professional to defend our proprietary systems and client data. You will lead vulnerability assessments across Hubnest’s four products, implement SAST/DAST in CI/CD, and monitor SIEM for anomalies.

You’ll harden AWS IAM configurations and map security controls to SOC 2, HIPAA, and GDPR, while training engineers on secure coding practices. Join a team that values discretion, ethical standards, and robust incident response.

Formación

• 5+ years of professional experience in Application Security, Cloud Security, or Offensive Security roles.
• 4+ years securing AWS cloud environments and auditing IAM policies.
• 3+ years using penetration testing tools such as Burp Suite Pro, Metasploit, Nmap, Nessus.
• 3+ years implementing and tuning SAST/DAST tools in CI/CD pipelines.
• 2+ years incident response leadership during cybersecurity incidents or data breaches.
• 2+ years mapping engineering controls to SOC 2 Type II or HIPAA requirements.
• 2+ years using SIEM platforms to write custom detection rules.
• Bachelor’s degree in relevant field or equivalent experience.

Responsabilidades

• Conduct vulnerability assessments and internal penetration tests across Hubnest’s products.
• Manage automated SAST/DAST in CI/CD pipelines.
• Monitor SIEM dashboards to detect anomalous activity and unauthorized access.
• Perform manual code reviews targeting OWASP Top 10 vulnerabilities.
• Lead during active security incidents with containment, eradication, and forensics.
• Harden AWS configurations and IAM roles; reduce misconfigurations.
• Collaborate with Compliance to map controls to SOC 2/HIPAA/GDPR.
• Document incident response playbooks and disaster recovery procedures.
• Maintain endpoint detection across distributed hardware.
• Run third-party vendor risk assessments prior to new tool procurement.
• Train engineering teams on secure coding practices.

Conocimientos

Security engineering

AWS security

Vulnerability management

Incident response

SOC 2/HIPAA/GDPR mapping

SIEM technologies

Educación

Bachelor's degree in Cybersecurity, Computer Science, Information Security

Herramientas

Burp Suite Pro

Metasploit

Nmap

Nessus

SonarQube

Checkmarx

Veracode

SIEM platforms (Splunk, Datadog Security, ELK)

Descripción del empleo

Hubnest builds vertical specific product engines for industries that require high operational precision. Founded in 2014, the company has spent twelve years embedded in the operational realities of the industries it serves, developing four purpose built products used by organizations across field services, political and civic operations, continuing care, and enterprise security.

You will defend Hubnest's proprietary systems and sensitive client data against external and internal threats. You proactively identify vulnerabilities, engineer defensive mechanisms, and enforce security protocols across all engineering teams.

What You Will Be Doing

• Conduct ongoing vulnerability assessments and internal penetration tests against Hubnest's four distinct products.
• Implement and manage automated Static Application Security Testing and Dynamic Application Security Testing in the CI/CD pipeline.
• Monitor centralized SIEM dashboards to detect, analyze, and hunt anomalous network behavior and unauthorized access attempts.
• Perform manual code reviews of complex pull requests, targeting OWASP Top 10 vulnerabilities including XSS, SQLi, and CSRF.
• Respond as the technical lead during active security incidents, executing containment, eradication, and forensic analysis protocols.
• Review and harden AWS cloud infrastructure configurations, eliminating misconfigurations and overly permissive IAM roles.
• Collaborate with the Compliance Analyst to map technical security controls to SOC 2, HIPAA, and GDPR frameworks.
• Document incident response playbooks, disaster recovery strategies, and internal security standard operating procedures.
• Maintain endpoint detection and response solutions across all distributed company hardware.
• Execute third-party vendor risk assessments prior to the procurement of any new software tooling.
• Train the software engineering department semi-annually on secure coding practices and emerging threat vectors.

What We Are Looking For

• 5+ years of professional experience in Application Security, Cloud Security, or Offensive Security roles.
• 4+ years of hands-on experience securing AWS cloud environments and auditing complex IAM policies.
• 3+ years of verifiable experience utilizing industry-standard penetration testing tools such as Burp Suite Pro, Metasploit, Nmap, and Nessus.
• 3+ years of experience implementing and tuning SAST/DAST tools such as SonarQube, Checkmarx, or Veracode within CI/CD pipelines.
• 2+ years of experience serving as a primary technical responder during active cybersecurity incidents or data breaches.
• 2+ years of direct, hands-on experience mapping technical engineering controls to SOC 2 Type II or HIPAA compliance requirements.
• 2+ years of experience utilizing SIEM platforms such as Splunk, Datadog Security, or ELK Suite to write custom detection rules.
• Current certification required: CISSP, OSCP, AWS Certified Security Specialty, or equivalent.
• Commitment to maintaining discretion and ethical standards regarding sensitive client data.
• Bachelor's degree in Cybersecurity, Computer Science, Information Security, or equivalent practical experience.

What We Offer

• Competitive compensation commensurate with experience
• Comprehensive health, dental, and vision coverage
• Flexible working arrangements
• Learning and development budget
• Paid time off and statutory holidays

Equal Opportunity Employment

Hubnest is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, national origin, age, disability, genetic information, or any other characteristic protected by applicable federal, state, or local law.