IT Security Engineer

About the role

We are looking for an IT Security Engineer to own and improve our security posture, protect our applications from external threats, and ensure compliance with industry standards.

Key responsibilities

• Perform manual and automated penetration tests on web applications and infrastructure.
• Validate security of new hardware and software deployments.
• Assist internal teams with security‑related questions and guidance.
• Manage firewall rules, HIDS/HIPS configurations and log monitoring.
• Oversee SOC II controls, coordinate external audits and pentesting.
• Prioritise security work through Jira backlog management.

Required profile

• 3+ years of experience in penetration testing of web applications.
• Hands‑on experience securing cloud‑based infrastructures.
• Background working on an information‑security team.
• Strong knowledge of common vulnerabilities (OWASP) and best practices.
• Familiarity with SOC II requirements and audit processes.
• Experience in related technical roles such as SysAdmin or Helpdesk.

Required skills

• Penetration testing tools and methodologies.
• Cloud security concepts and platforms.
• Linux server administration.
• Firewall management, HIDS/HIPS and log monitoring.
• Jira, Kanban and Agile DevOps workflows.
• Scripting languages (Python, Perl, Ruby, PHP).

What we offer

• Award‑winning company culture with flexibility and work‑life balance.
• 3 weeks paid time off, 11 paid holidays and paid vacation days.
• Comprehensive health benefits (medical, dental, vision) with HSA/FSA options.
• 401(k) plan with company match.