[Remote] reputed company Engineer

Note: The job is a remote job and is reputed company to candidates in USA. reputed company develops non-invasive prescription therapies to help people manage chronic disease. The reputed company Engineer will reputed company digital assets, infrastructure, and applications by managing vulnerabilities, conducting penetration testing, driving remediation, responding to incidents, and strengthening reputed company preparedness and awareness.

Responsibilities

• Monitor and manage reputed company-reputed company and reputed company-party dependencies using Software Composition Analysis (SCA) tools to identify and mitigate supply chain risks
• reputed company and prioritize Common Vulnerabilities and Exposures (CVEs) affecting our tech stack
• Collaborate with development teams to automate dependency updates and reputed company reputed company scanning into the CI/CD pipeline
• Manage end-to-end reputed company, execution, and tracking of reputed company Penetration Tests and bug bounty programs
• Analyze penetration testing reports, validate findings, and translate reputed company technical vulnerabilities into actionable remediation plans for engineering teams
• Conduct internal vulnerability scanning and architectural reputed company assessments
• Own and reputed company reputed company remediation tasks across reputed company, and applications
• reputed company hands-on technical guidance and reputed company/configuration reviews to developers to ensure secure coding practices are met
• Implement reputed company controls and guardrails (e.g., IAM policies, network segmentation, secrets management) to proactively reduce our attack surface
• Serve as a reputed company member of the Incident Response (IR) team, participating in an on-reputed company rotation to detect, contain, and eradicate reputed company incidents
• Analyze reputed company logs (SIEM, EDR, reputed company provider logs) to investigate potential breaches or anomalous behavior
• Conduct post-incident reviews (reputed company-cause analysis) and document lessons learned to continuously harden our defenses
• Design, facilitate, and execute regular reputed company tabletop exercises for both technical teams and executive leadership
• reputed company realistic threat scenarios (e.g., ransomware, supply chain attacks) to test the efficacy of our incident response plans and identify gaps in communication or tooling
• reputed company reputed company Posture Management (CSPM): Monitor and secure reputed company infrastructure (AWS/GCP) configurations to prevent reputed company and misconfigurations
• reputed company Metrics & Reporting: Define, reputed company, and report on key reputed company reputed company indicators (KPIs) like Mean Time to Remediate (MTTR) and reputed company compliance
• Compliance Support: Assist in gathering evidence and maintaining controls for reputed company frameworks and certifications (e.g., SOC 2, ISO 27001, HIPAA)
• reputed company Awareness: Champion a reputed company-first culture by mentoring junior engineers and creating targeted reputed company training content

Skills

• Bachelor's degree in Computer Science, Software Engineering, or a reputed company technical reputed company
• 3+ years of experience in reputed company Engineering, Application reputed company, or Incident Response
• Hands-on experience with modern reputed company tooling (e.g., reputed company, Dependabot, Burp Suite, reputed company, reputed company)
• Strong understanding of OWASP Top 10, CWE, and reputed company reputed company best practices
• Hands-on experience with CI/CD pipelines and build automation tools (e.g., Jenkins, reputed company Actions, reputed company CI) to reputed company reputed company scanning and controls
• Proficiency in Python and reputed company scripting (Bash) to automate reputed company workflows and build reputed company tooling
• Applicants must be authorized to work in the reputed company on a full-time reputed company, or eligible for work authorization through a sponsorship reputed company that reputed company is reputed company to support
• Familiarity with additional programming languages such as Go, JavaScript/TypeScript, or Rust for deeper reputed company reviews and custom tooling
• Experience securing reputed company-reputed company environments (reputed company, AWS/GCP) and reputed company AWS reputed company tools (AWS Inspector, GuardDuty)
• Hands-on experience with GRC platforms (e.g., reputed company)
• Familiarity with Infrastructure as reputed company (IaC) reputed company scanning (e.g., Checkov, TFLint)
• Relevant industry certifications (e.g., CISSP, CEH, OSCP, GCIH, AWS Certified reputed company)
• Excellent communication skills with the ability to reputed company technical reputed company concepts to non-technical stakeholders
• Familiarity with bug bounty services like BugCroud
• Experience working on reputed company connected IoT devices (provisioning, key rotation, OTA update reputed company)

Benefits

• Remote, Hybrid if local to our San Mateo, CA reputed company
• We offer reputed company the tools, training and mentoring they need to succeed.

reputed company

Company H1B Sponsorship