Security Engineer - Hybrid/Remote - BI-EJFDG

Bounteous; United States; Hybrid; USD 120.000 - 180.000; Vollzeit

Zusammenfassung

Bounteous is seeking a Security Engineer to join the Cloud Engineering & Security team. The role focuses on implementing security controls, conducting vulnerability assessments, and guiding incident response to protect client environments.

The ideal candidate has 4+ years of security experience, strong knowledge of web application security, and the ability to read multiple programming languages. The position offers hybrid/remote work options and opportunities to advance security practices across

Qualifikationen

• Bachelor's degree in CS or related field or equivalent practical experience
• 4+ years of security industry experience
• Experience with penetration testing
• Knowledge of web application security
• Ability to read/understand source code (Java/JavaScript/Go) and find vulnerabilities
• Programming/scripting skills (Python/Ruby/PHP/C/Go/Java/Perl/Git)
• OSCP or OSWE certification is a plus
• Experience with cloud architecture and security is a plus
• Strong written and verbal communication skills
• Familiarity with security standards and regulations

Aufgaben

• Create security solutions for proofs of concept and new integrations
• Proactively study security threats and threat intelligence to prevent/detect threats
• Monitor networks/systems for threats and assess incident severity
• Conduct vulnerability assessments and pentests, run regular scans
• Assist with incident response and post-incident reporting
• Ensure compliance with security standards and evolving regulations
• Develop and enforce security policies, standards, procedures
• Manage security tools like SIEM, IDS/IPS, and endpoint security
• Stay updated on latest cyber threats and vulnerabilities
• Prepare detailed reports on incidents and risk assessments

Kenntnisse

Penetration testing

Web app security

Vulnerability assessment

Threat intelligence

Cloud security

Programming/scripting

Source code reading

Ausbildung

Bachelor's degree in Computer Science

OSCP or OSWE certification

Tools

SIEM

IDS/IPS

Cloudflare security products

Endpoint security

Jobbeschreibung

Hello Everyone,

Greetings from Bounteous!!

We have an excellent Opening for the below Skills:

Job Title: Security Engineer

Experience: 4+Years

Primary Skills: WAF, VA, PT, CyberSecurity Risk Assessment

Base Location: Chennai / Bangalore (Hybrid/Remote)

Description

Bounteous is a leading digital innovation partner for the worlds most ambitious brands. Our organization creates transformative digital experiences through services that include strategy, experience design, technology, analytics and insight, and marketing.

Our Managed Services team is looking for a Security Engineer, to join our growing Cloud Engineering & Security team. This role will work closely with department team members, Principal Architects, and leaders from other disciplines to support key security initiatives and the continued development of solutions for improving security standards, baselines, policies, and procedures for clients.

Role and Responsibilities

• Partner with leads and architects to create security solutions for proof of concepts, new integrations, and other technical service offerings.
• Exercise due care in increasing your knowledge of the security field, threat landscape, and security intelligence, moving proactively toward the prevention and detection of threats
• Continuously monitor the client organization's networks and systems for potential threats and vulnerabilities. Analyze and assess the severity of security incidents.
• Conduct regular vulnerability assessments and penetration testing to identify weaknesses and recommend remediation measures. Run daily, weekly, and monthly scans to assess systems risks and issues.
• Assist with incident response efforts, including containment, analysis, recovery, and post-incident reporting. Ensure compliance with incident response procedures.
• Ensure compliance with industry standards and regulations. Keep updated with evolving compliance requirements and maintain the organization's security posture.
• Contribute to developing, implementing, and enforcing security policies, standards, and procedures.
• Manage and maintain security tools and technologies, such as SIEM systems, IDS/IPS, and endpoint security.
• Stay current with the latest cyber threats and vulnerabilities. Leverage threat intelligence to enhance security.
• Prepare detailed reports on security incidents, vulnerabilities, and risk assessments. Maintain accurate documentation for security policies and procedures.

Preferred Qualifications

• Bachelor's degree in Computer Science or a related technical field, or equivalent practical experience
• 4+ years of relevant industry experience in security
• Passion for information security, particularly in penetration testing
• Knowledge of web application security
• Ability to read and understand source code (Java, JavaScript, Go etc), and find vulnerabilities in sophisticated code bases
• Sysadmin skills (Linux/Mac/Windows) & Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, Git, etc.)
• Coding experience in one or more general-purpose languages
• OSCP or OSWE certification (nice to have)
• Experience with CTFs or hacking labs
• Proficiency in MacOS and other Unix-based systems
• Programming/scripting skills (Python, JavaScript, Go, etc.)
• Knowledge of cloud architecture and security (nice to have).
• Ability to learn new skills, concepts, and technologies
• Strong written and verbal communication skills, ability to communicate vulnerabilities to a variety of stakeholders
• Strong understanding of fundamental computing, database, networking, and security concepts
• Considerable Experience with Cloudflare Security Products & Features (Cloudflare ACE Certification preferred)
• Good communication skills and ability to remain calm and work under pressure.