Security Engineer - NY

We are seeking a Security Engineer with 7+ years of experience in information security, application security, or infrastructure security. The ideal candidate will have strong knowledge of network security fundamentals, web/app security, cloud security, and CI/CD/DevSecOps practices.

Requirements

• 7+ years of experience in information security, application security, or infrastructure security
• Strong knowledge of network security fundamentals (TCP/IP, firewalls, VPN, proxies)
• Strong knowledge of web/app security (OWASP Top 10, API security, authentication/authorization)
• Strong knowledge of cloud security (AWS, Azure, or GCP)
• CI/CD and DevSecOps practices
• Hands-on experience with SAST/DAST/SCA tools (SonarQube, Checkmarx, Veracode, Burp Suite)
• Hands-on experience with vulnerability scanners (Nessus, Qualys, OpenVAS)
• Hands-on experience with SIEM/EDR (Splunk, Sentinel, CrowdStrike)
• Hands-on experience with container/Kubernetes security (Trivy, Aqua, Falco)
• Knowledge of secure coding practices in at least one language (Python, Java, Go, JavaScript, etc.)
• Strong analytical, problem-solving, and communication skills

Benefits

• Medical benefits
• Vision benefits
• Dental benefits
• 401k retirement plan
• Variable pay/incentives
• Paid time off
• Paid holidays