Security engineer in SaaS

Semaphore is a remote-first software company helping engineering teams build, test, and deliver software with confidence. Our customers rely on Semaphore Cloud and our self-hosted enterprise products to run critical development workflows securely and reliably. We maintain SOC 2 Type 2 and ISO 27001:2022 compliance and are hiring a Security Engineer to own the technical side of our security program.

• Run the vulnerability-management lifecycle: scanning, triage, prioritization, remediation, exceptions, and verification.
• Operate and improve security monitoring and SIEM tooling, including alert quality, dashboards, detection rules, and integrations.
• Investigate security alerts and lead the technical response to security incidents.
• Improve the security of Linux hosts, cloud infrastructure, networks, firewalls, containers, and internal services.
• Own technical controls for identity and access management, least privilege, just-in-time access, secrets, and certificates.
• Automate patching, evidence collection, recurring control checks, and other security operations.
• Coordinate penetration tests and drive technical findings through remediation and verification.
• Translate SOC 2 and ISO 27001 control requirements into effective technical implementations.
• Produce clear technical evidence for internal and external audits in partnership with the Compliance Manager.
• Maintain security runbooks, system documentation, risk-based priorities, and operational metrics.
• Help engineering teams make practical security decisions without adding unnecessary process.

• Proven ownership of technical security in a production SaaS, cloud, hosting, or infrastructure environment.
• Strong Linux systems, networking, and cloud-security fundamentals.
• Hands-on experience with vulnerability management, patching, hardening, and remediation at scale.
• Experience operating SIEM or security-monitoring systems and investigating security events.
• Practical understanding of IAM, privileged access, secrets management, certificates, and network controls.
• Ability to automate operational work using Python, Bash, infrastructure-as-code, or similar tools.
• Experience participating in incident response and communicating clearly during high-pressure situations.
• Working knowledge of ISO 27001, SOC 2, or similar security-control frameworks.
• Strong written and spoken English and comfort working independently in a remote, asynchronous team.
• Good risk judgment: the ability to distinguish urgent security problems, acceptable exceptions, and low-value processes.
• Будет плюсом: Experience with Wazuh or a comparable SIEM/security-monitoring platform; Experience with Teleport, PAM, or just-in-time access systems; Experience securing large Linux server fleets or hybrid cloud/on-premise environments; Familiarity with CI/CD systems, build infrastructure, containers, and software supply-chain security; Experience supporting SOC 2 or ISO 27001 audits from the technical-control side; Relevant certifications such as Security+, CISSP, CISM, GIAC, or ISO 27001, although certification is not required

• Условий в вакансии нет