Security Engineer Magnet Forensics

Job description
Who We Are; What We Do; Where We’re Going Magnet Forensics is a global leader in the development of digital investigative software that acquires, analyzes, and shares evidence from computers, smartphones, tablets, and IoT-related devices. We are continually innovating so our customers can deploy advanced and effective tools to protect their companies, communities, and countries. Serving over 4,000 customers in over 100 countries, our solutions are playing a crucial role in modernizing digital investigations, helping investigators fight crime, protect assets, and guard national security. With employees based around the world, Magnet Forensics has been expanding our global presence with offices in Waterloo and Ottawa, Canada; Atlanta, GA, Herndon, VA, Westminster, CO; and Singapore. As a part of Magnet Forensics, you can expect to make a difference in the world, no matter what role you play. You’ll be supported through learning and development, not to mention an incredible team with unbelievable talent and integrity. If you think you would be the right person to join our team working towards this goal, we would love to hear from you! Role Summary: We are seeking a highly skilled and motivated Security Engineer to join our dynamic team and play a key role in ensuring the security and integrity of our organization’s products and customers’ data. The Security Engineer will be part of the engineering organization and responsible for implementing, managing, and enhancing security measures across our applications, products, and services to protect against potential cyber threats and attacks. The ideal candidate will possess a strong technical background, a deep understanding of security best practices, and enjoy collaborating with developers and engineering teams to identify and mitigate security risks effectively. You’ll be a part of a talented team responsible for a wide range of product and engineering security programs. Join us as a Security Engineer and make a significant impact by fortifying our organization’s security posture and ensuring the confidentiality, integrity, and availability of our critical assets. NOTE: Candidates must reside in the United States or Canada. Role Responsibilities: • Implement, and maintain application security processes and tooling such as SAST, SCA, containers, etc; • Collaborate with software developers and system administrators to review and improve the security architecture of new and existing applications, systems, and code. Familiarity with threat modeling, design reviews are helpful; • Conduct regular security assessments, vulnerability scans, and web application scanning. Work with engineering teams on notification, remediation, and patching strategies; • Monitor security events, analyze logs, and generate reports to identify suspicious activities, potential threats, and security breaches; • Establish and enforce security policies, standards, and guidelines in alignment with industry best practices, legal requirements, and internal security policies; • Implement, and maintain security infrastructure components such as Security Hub, Inspector, Config, Defender for Cloud. Qualifications: • 3+ years as a Security Engineer or in a similar role, demonstrating hands-on experience in executing an established security program; • Strong knowledge of security protocols, cryptography, and common security technologies; • Ability to automate security tasks and integrate with various CI/CD tooling and processes; • Experienced with one or more scripting languages and reading basic scripts (Python, C#, PowerShell, Bash, or etc.); • Comfortable with writing pipelines for automation tasks (Jenkins, AzDO, GitLab, GitHub); • Familiarity writing IaC (CDK,