Security Engineer
Description For Security Engineer
Porter is hiring a Security Engineer to join their team. As a Security Engineer at Porter, you will provide technical expertise in securing the development and deployment of SaaS and Cloud platforms, web and mobile applications. Your responsibilities will include detecting and responding to security incidents, implementing security scanning and monitoring systems, working with DevOps and SRE teams to implement security in CI/CD pipelines, enhancing detection and response capabilities, writing scripts to automate tasks, defining security guidelines, coordinating penetration testing, and developing security reports. You'll need 4+ years of Security Operations or Incident Response experience, 2+ years working with AWS, implementing SIEM systems and endpoint security tools, experience with Identity and Access Management systems, and scripting abilities in Python, bash, or PowerShell. Experience with HIPAA/HITRUST compliance is a plus. Porter offers full-time employment, competitive wages, remote work environment, medical, dental, and vision benefits, paid holidays, and a fun team culture.
Responsibilities For Security Engineer
- Detect, investigate, and respond to security incidents across all systems and networks
- Coordinate recovery and remediation efforts with internal and external stakeholders
- Implement and maintain security scanning and monitoring systems
- Work with DevOps and SRE teams to implement security into CI/CD pipelines
- Enhance detection and response capabilities
- Write scripts to automate tasks and conduct incident responses
- Write and refine playbooks, run books, alerts, and documentation
- Define and establish security guidelines
- Coordinate with vendors for penetration testing and vulnerability assessments
- Develop Security Dashboard and Quarterly Security reports
- Work with project managers to ensure business and development needs are met
Requirements For Security Engineer
- Four or more years of Security Operations or Incident Response experience
- Two or more years of production experience working with AWS
- Two or more years of experience implementing SIEM systems
- Two or more years of experience implementing endpoint security tools
- Experience implementing Identity and Access Management systems with Role Based Access Control. OAUTH experience preferred
- Hands-on experience developing build scripts that automate code quality scans, security scans, and dependency management leveraging DevSecOps tools
- Ability to script in Python, bash, or PowerShell
- Experience in implementing security and privacy controls compliant with HIPAA/HITRUST a plus
Benefits For Security Engineer
- Medical benefits within 30 days of hire
- Dental benefits within 30 days of hire
- Vision benefits within 30 days of hire
- Paid holidays
- Remote work environment
- Competitive wage
