Senior Security Engineer — Cloud & App Defenses (Flexible)

Hubnest Inc; United States; Ibrido; USD 140.000 - 190.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health coverage

Flexible working arrangements

Learning budget

Paid time off

Descrizione del lavoro

Hubnest Inc. is seeking a seasoned security professional to defend our proprietary systems and client data. You will lead vulnerability assessments across Hubnest’s four products, implement SAST/DAST in CI/CD, and monitor SIEM for anomalies.

You’ll harden AWS IAM configurations and map security controls to SOC 2, HIPAA, and GDPR, while training engineers on secure coding practices. Join a team that values discretion, ethical standards, and robust incident response.

Competenze

• 5+ years of professional experience in Application Security, Cloud Security, or Offensive Security roles.
• 4+ years securing AWS cloud environments and auditing IAM policies.
• 3+ years using penetration testing tools such as Burp Suite Pro, Metasploit, Nmap, Nessus.
• 3+ years implementing and tuning SAST/DAST tools in CI/CD pipelines.
• 2+ years incident response leadership during cybersecurity incidents or data breaches.
• 2+ years mapping engineering controls to SOC 2 Type II or HIPAA requirements.
• 2+ years using SIEM platforms to write custom detection rules.
• Bachelor’s degree in relevant field or equivalent experience.

Mansioni

• Conduct vulnerability assessments and internal penetration tests across Hubnest’s products.
• Manage automated SAST/DAST in CI/CD pipelines.
• Monitor SIEM dashboards to detect anomalous activity and unauthorized access.
• Perform manual code reviews targeting OWASP Top 10 vulnerabilities.
• Lead during active security incidents with containment, eradication, and forensics.
• Harden AWS configurations and IAM roles; reduce misconfigurations.
• Collaborate with Compliance to map controls to SOC 2/HIPAA/GDPR.
• Document incident response playbooks and disaster recovery procedures.
• Maintain endpoint detection across distributed hardware.
• Run third-party vendor risk assessments prior to new tool procurement.
• Train engineering teams on secure coding practices.

Conoscenze

Security engineering

AWS security

Vulnerability management

Incident response

SOC 2/HIPAA/GDPR mapping

SIEM technologies

Formazione

Bachelor's degree in Cybersecurity, Computer Science, Information Security

Strumenti

Burp Suite Pro

Metasploit

Nmap

Nessus

SonarQube

Checkmarx

Veracode

SIEM platforms (Splunk, Datadog Security, ELK)

Descrizione del lavoro

Hubnest Inc. is seeking a seasoned security professional to defend our proprietary systems and client data. You will lead vulnerability assessments across Hubnest’s four products, implement SAST/DAST in CI/CD, and monitor SIEM for anomalies.

You’ll harden AWS IAM configurations and map security controls to SOC 2, HIPAA, and GDPR, while training engineers on secure coding practices. Join a team that values discretion, ethical standards, and robust incident response.