IT Security Engineer

IT Security Engineer responsible for managing our security posture, defending the application from external threats, and overseeing security controls (SOC II) across infrastructure and software. Responsibilities include conducting penetration tests against web applications and infrastructure, validating security on new hardware/software, assisting stakeholders with security questions, managing firewall rules and internal pentesting, overseeing SOC II controls and external pentesting, prioritizing work via backlog systems (Jira), and deciding when to pull the plug on risky features or functions. Required skills include hands-on penetration testing (3+ years), cloud security, Linux server environments, knowledge of OWASP, SOC II familiarity, scripting (Python/Perl/Ruby/PHP), experience with Kanban/Agile DevOps, and relevant security certifications (CISSP/Security+). A degree in CS/IT or similar field is expected, with strong communication, leadership, and proactive work style.