Associate Security Engineer

Experteer Overview

The role focuses on translating compliance guidance into practical security improvements within product and infrastructure. You’ll fix and improve systems from week one, avoiding purely governance tasks and driving real risk reduction. This position offers growth in a fast-paced, security-first environment that values practical impact and collaboration.

• Triage vulnerabilities from bug bounty, scanners, and dependency checks; support incident response with fixes and post-mortems; monitor security alerts from SIEM.
• Implement and maintain SSO/MFA configurations using Okta and Google Workspace; manage roles, access rights, and periodic audits; manage production secrets and credential rotation.
• Run pre-deployment security checks (static analysis, dependency scanning, container image scanning); enforce security reviews and help engineers remediate findings.
• Monitor and tune SIEM/monitoring rules; operate SIEM infrastructure (ElasticSearch, log pipelines); escalate and respond to suspicious activity.
• Coordinate pentest activities: prepare test environments and track remediation; maintain security runbooks and procedures.

• Foundational experience in security engineering, SOC, or DevOps/SRE with a security focus.
• Solid understanding of web application security (OWASP Top 10).
• Hands-on with at least two: vulnerability scanning tools, SIEM/log analysis, IAM systems (Okta, Google Workspace), or CI/CD security tooling.
• Scripting competence (Python, Bash, or similar) for automation.
• Collaborative mindset with clear, constructive security communication and risk articulation.

• Flexible on-site and remote policy
• Latest Apple equipment
• Moka.care for wellbeing
• Great office snacks
• Location-specific benefits (health insurance, wellness allowances, commuter support, meal vouchers, gym memberships)