Security Engineer: Cloud IAM, SAST/DAST & DevSecOps

Ethereum Technologies; Houston (TX); In loco; USD 120.000 - 190.000; Tempo pieno

Descrizione del lavoro

Ethereum Technologies is seeking an experienced Application Security Engineer to lead secure baselines, perform security testing, and manage IAM and MFA across platforms. You will integrate security into CI/CD workflows and monitor with SIEM, while coordinating remediation of vulnerabilities across applications, APIs, databases, and infrastructure.

The role requires a proactive security mindset, strong collaboration, and a track record of implementing CIS benchmarks and security standards in

Competenze

• Strong understanding of application security concepts and practices.
• Experience with SAST, DAST, and SCA tools.
• Proficiency in managing AWS IAM IdaaS solutions and practices; familiarity with CI/CD security integration.
• Knowledge of security logging/monitoring tools and compliance standards (e.g., NIST, ISO 27001).

Mansioni

• Implement and maintain secure server baselines (Windows, Linux, Cloud) aligned with CIS Benchmarks.
• Conduct SAST, DAST, and SCA assessments for in-house and third-party apps.
• Identify and coordinate remediation of vulnerabilities across apps, APIs, databases, and infrastructure.
• Manage Identity Access Management (IAM), including privileged access, service accounts, API keys, and MFA.
• Respond to security incidents and investigate server and application threats.
• Integrate security controls into CI/CD pipelines including container scanning and secrets management.
• Ensure security logs and SIEM integration across environments.

Conoscenze

Application security

SAST/DAST/SCA

AWS IAM/IdaaS

CI/CD security

SIEM/logging

Container security (Docker/Kubernetes)

Formazione

Bachelor's degree in CS/IT

CISSP/CEH/CASE preferred

Strumenti

CI/CD tools

Docker

Kubernetes

SIEM

Descrizione del lavoro

Ethereum Technologies is seeking an experienced Application Security Engineer to lead secure baselines, perform security testing, and manage IAM and MFA across platforms. You will integrate security into CI/CD workflows and monitor with SIEM, while coordinating remediation of vulnerabilities across applications, APIs, databases, and infrastructure.

The role requires a proactive security mindset, strong collaboration, and a track record of implementing CIS benchmarks and security standards in