Security Engineer

📋 Description

• Find and fix vulnerabilities across our stack. Work directly in the application repositories and in
• Build and tune detections in Datadog Cloud SIEM. Own detection coverage, write the rules, cut the
• Respond to security incidents. Investigate, contain, and write the RCA, then track the remediation
• Harden our AWS estate. GuardDuty, Security Hub, Config, CloudTrail, KMS, Secrets Manager, IAM least
• Secure the delivery pipeline. GitHub Advanced Security, code scanning, Dependabot, secret scanning
• Automate the repetitive work. Build workflows and scripts that triage, enrich, and remediate

🎯 Requirements

• A Bachelor's degree in a relevant field and 4 years of experience, or a minimum of 6 years of
• You write code. You can read an unfamiliar application repository, reason about the vulnerability
• Deep AWS security experience. IAM and least-privilege design, GuardDuty, CloudTrail, KMS, VPC
• Hands-on detection engineering in a SIEM. You have written rules, tuned them against real noise
• Real incident response experience in cloud environments, covering investigation, containment
• Application security fundamentals: OWASP Top 10, dependency and secrets risk, and practical CI/CD

🎁 Benefits

• Remote First, Remote Always
• PTO in accordance with local labor requirements
• Monthly Wellness Fridays - enjoy an extra-long weekend every month
• Fully Paid Parental Leave
• Home office stipend based on country of residency
• Professional development courses in Cloudbeds University