Junior Security Engineer

Summary/Objective

The Junior Security Engineer role participates in information security related operations defined in corporate information security policies and procedures. The team works on building and maintaining security infrastructure, identifying information security risks, assessing and reporting current threats and vulnerabilities, analysing internal and external network activity from security standpoint, working with SOC on security incidents, performing required compliance related procedures and various regulatory requirements. The team is also responsible for any information security related solutions analysis, design and implementation.

Essential Functions/ Responsibilities

• Design new security solutions to improve corporate security posture;
• Assess new application design and features from security standpoint;
• Identify and provide mitigation/improvement steps for any security gaps in network / server / application design;
• Review cloud security from compliance standpoint and design/implement optimization as needed
• Work as an SME with various Paymentus teams to assist with security risks evaluation and threat modeling;
• Participate in new security solutions evaluation, design and implementation;
• Build automation tools to optimize security related processes and procedures;
• Ensure that the principle of least privilege is applied to all user and service accounts and is used for access provisioning in all cases;
• Follow proper processes and procedures in place for all security related events.

Supervisory Responsibility

No Supervisory responsibilities at this time.

Education and Experience

• Bachelor’s degree in Computer Science, Information Technology or related field
• At least 2 years of relevant experience in systems administration, IT operations and/or software development
• Experience in software development using languages like Java, Javascript, Python
• Experience in Linux / UNIX operating systems administration including bash scripting
• Public cloud experience (AWS, GCP, Azure, etc)
• Experience designing and building cloud solutions from scratch
• Experience with configuration management tools like Salt / Ansible / Puppet / Chef
• Experience building infrastructure using Terraform / CloudFormation (Infrastructure as a code)
• Experience with Docker/Kubernetes
• Experience in network and network security administration
• Knowledge of Structured Query Language (SQL)
• Proficiency in security code reviews and secure coding practices
• Web Application security and OWASP Top 10 knowledge
• Experience with Java and NodeJS
• Passion in all things security

Nice to have:

• Nginx, Apache HTTPD
• Database administration and security (Oracle and MySQL are preferable)
• Familiarity with security standards such as PCI DSS, ISO 27001, etc.
• Experience working with identity and access control management solutions

Work Environment

This job operates in a professional office environment. This role routinely uses standard office equipment such as laptop computers, photocopiers and smartphones.

Physical Demands

While performing the duties of this job, the employee is regularly required to talk or hear. Specific vision abilities required by this job include close vision and ability to adjust focus. This would require the ability to lift files, open filing cabinets and bend or stand on a stool as necessary. The employee is occasionally required to stand; walk; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; and stoop, kneel, crouch or crawl. The employee may be required to life up to 25 lbs.

Position Type/Expected Hours of Work

This is a full-time position. Days and hours of work are Monday through Friday during normal business hours. Occasional evening and weekend work may be required as job duties demand.

Travel

Minimal travel

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

EEO Statement

Paymentus is an equal opportunity employer. We enthusiastically accept our responsibility to make employment decisions without regard to race, religious creed, color, age, sex, sexual orientation, national origin, ancestry, citizenship status, religion, marital status, disability, military service or veteran status, genetic information, medical condition including medical characteristics, or any other classification protected by applicable federal, state, and local laws and ordinances. Our management is dedicated to ensuring the fulfillment of this policy with respect to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment advertising, pay, and other forms of compensation, training, and general treatment during employment.

Reasonable Accommodation

Paymentus recognizes and supports its obligation to endeavor to accommodate job applicants and employees with known physical or mental disabilities who are able to perform the essential functions of the position, with or without reasonable accommodation. Paymentus will endeavor to provide reasonable accommodations to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so would impose an undue hardship on the Company or pose a direct threat of substantial harm to the employee or others.

An applicant or employee who believes he or she needs a reasonable accommodation of a disability should discuss the need for possible accommodation with the Human Resources Department, or his or her direct supervisor.