Information Security Engineer - Remote

Overview

As an Information Security Engineer, you will support the implementation of G-P’s established application security program. You will assess the company's web technologies using enterprise grade tools and coordinate remediation efforts with engineering teams.

In Short

• Participate in threat modeling exercises with engineering team members
• Triage SCA/SAST/DAST/CSPM findings
• Support vulnerability management efforts for networks and infrastructure
• Partner with engineering teams for timely remediation of security findings
• Perform security assessments, reviews, and internal penetration tests
• Support application security programs and security team initiatives
• Develop scripts and tools to automate security tasks
• Build custom solutions to integrate security tools with existing systems

Requirements

• BS (or higher) in Computer Science or related field
• 3+ years of experience in application security
• Excellent communication skills and business acumen
• Proficiency in coding/scripting languages (e.g., Python, Go)
• Web application penetration testing experience
• AWS security and engineering knowledge
• Experience with developing or testing web application technologies
• Nice to have security certifications (OSCP, OSWP, etc.)
• Experience with Linux, Docker, Terraform

Benefits

• World class benefits including health, vision, and dental
• Competitive compensation
• Paid-time-off (PTO)
• Generous family leave
• Sabbatical after 5 years of employment
• Frequent team events and a strong focus on culture