{"id":3018023,"url":"https://alion.io/job/bisecthosting-senior-security-engineer","title":"Senior Security Engineer","company":{"id":454233,"name":"BisectHosting","domain":"bisecthosting.com","url":"https://alion.io/company/bisecthosting","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"AWS","optional":true},{"name":"Cloudflare","optional":true},{"name":"GitHub","optional":true},{"name":"Laravel","optional":true},{"name":"MySQL","optional":true},{"name":"PHP","optional":true},{"name":"Rest API","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-21T17:02:05Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-24T08:25:14Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Description\nBisectHosting is hiring a Senior Security Engineer to take ownership of security across our entire business, from infrastructure and application security to employee awareness and internal operations.\nWe're looking for someone who thrives in a fast-moving, startup-like environment, enjoys wearing multiple hats, and isn't afraid to get their hands dirty. You'll have the freedom and responsibility to identify risks, set priorities, and implement solutions without needing constant direction.\nThis is a highly hands-on role. One day you might be reviewing code for vulnerabilities, the next conducting penetration tests, securing internal tools, or training employees on social engineering risks. You'll work directly with engineering and leadership to build practical security measures that protect our customers, employees, and infrastructure without unnecessarily slowing down the business.\nWhat you'll work on:\nOwn and continuously improve security across applications, infrastructure, internal systems, and business operations\nConduct security-focused code reviews, identify vulnerabilities, and work directly with engineers to implement fixes\nPerform hands-on penetration testing and vulnerability assessments across web applications, APIs, networks, and infrastructure\nSecure internal and external APIs through proper authentication, authorization, access controls, and credential management\nOwn identity and access management (IAM), including employee permissions, role-based access controls, least-privilege policies, and regular access audits\nEstablish practical security standards for internal tools, third-party services, cloud environments, and production infrastructure\nLead employee security awareness initiatives, including phishing simulations, social engineering testing, and security training\nIdentify risks in everyday employee workflows and implement technical or procedural safeguards to reduce exposure\nImplement and maintain security monitoring, vulnerability scanning, threat detection, and incident response processes\nBuild automated security checks into development workflows, including code scanning, dependency auditing, and CI/CD security controls\nInvestigate security incidents, identify root causes, and implement preventative improvements\nIndependently identify, prioritize, and execute security initiatives based on business risk and impact\nWork across departments to solve security problems, even when they fall outside traditional engineering responsibilities\nRequirements\nWhat we're looking for:\nStrong professional experience in security engineering, application security, infrastructure security, or a similar role\nA self-starter who can manage their own time, establish priorities, and drive projects from identification through implementation\nComfortable wearing multiple hats and taking responsibility for problems outside a narrowly defined job description\nHands-on mentality with a willingness to investigate problems, write code, configure systems, and implement fixes personally\nStrong understanding of application security, secure coding practices, and common vulnerabilities such as those outlined by OWASP\nExperience with penetration testing, vulnerability assessments, and security testing tools\nStrong understanding of API security, authentication, authorization, OAuth, access tokens, and credential management\nExperience managing IAM, RBAC, MFA, SSO, and least-privilege access policies\nStrong Linux, networking, Docker, and cloud infrastructure security fundamentals\nExperience securing production applications, databases, internal tools, and cloud environments\nFamiliarity with automated security tooling, including SAST, DAST, dependency scanning, and secrets detection\nAbility to evaluate human security risks, including phishing, social engineering, and unsafe employee practices\nStrong problem-solving skills and the ability to make practical security decisions with limited resources or incomplete information\nAbility to communicate security risks clearly to technical and non-technical employees\nComfortable operating independently in a fast-paced environment with changing priorities and minimal bureaucracy\nPractical approach to security that balances risk reduction, usability, and business needs\nPreferred Qualifications:\nExperience as an early security hire or owning security at a startup or growing technology company\nExperience securing hosting platforms, SaaS products, or large-scale infrastructure environments\nExperience with Cloudflare, AWS, and bare-metal infrastructure security\nExperience securing PHP/Laravel applications, REST APIs, and MySQL databases\nFamiliarity with GitHub security workflows, automated pull request scanning, and software supply-chain security\nExperience conducting internal red-team exercises, phishing campaigns, and social engineering simulations\nExperience with SIEM platforms, intrusion detection, centralized logging, and threat intelligence\nExperience with endpoint security, device management, and employee onboarding/offboarding security processes\nExperience building security processes and tooling from the ground up\nRelevant security certifications such as OSCP, CISSP, GIAC, or equivalent demonstrated experience\nSalary Description\n$115k-$150k depending on location & experience","description_format":"text","description_chars":5303,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Web Hosting & VPS"],"lifecycle":[{"event":"open","at":"2026-10-21T17:06:12Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":28,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/bisecthosting-senior-security-engineer","json_url":"https://alion.io/job/bisecthosting-senior-security-engineer.json","meta":{"generated_at":"2026-10-24T11:30:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16384,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":454233},"rest":"https://alion.io/mcp/rest/get_company?id=454233"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbisecthosting-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbisecthosting-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbisecthosting-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bisecthosting-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbisecthosting-senior-security-engineer"}]}