[Hiring] Security Engineer @CellPoint Digital

Role Description

Join CellPoint Digital as a Security Engineer. You are the builder and the mechanic of our security ecosystem. Your mission is to turn architectural designs into high-performing, automated reality. In our 1-2-2 team model, you provide the technical "muscle" that allows our Architects to maintain compliance and our Lead to drive strategy.

You will be on the front lines of several critical greenfield projects:

• Implementing our Just-In-Time (JIT) access platform.
• Technically configuring our SIEM/SOAR within Google Cloud.
• Automating our compliance evidence collection via the Sprinto GRC platform to eliminate manual toil.

You are someone who believes that if a task has to be done twice, it should be scripted.

How You Will Make an Impact:

• Automation & GRC Engineering: Support the Senior Architects by building and maintaining API integrations between our tech stack and Sprinto.
• SIEM/SOAR Implementation (GCP SCC): Perform the technical setup and tuning of GCP Security Command Center.
• Zero-Trust & Identity Operations: Execute the technical rollout of Ploy (JIT).
• Shift-Left & CI/CD Tuning: Maintain security scanners (SAST/DAST) within GitHub Actions.
• Operational Defense & MDR Support: Act as the primary technical responder for escalations from our CrowdStrike MDR service.
• Resilience & DRP Execution: Build and maintain the automation scripts used for Disaster Recovery (DRP) failover.

Metrics to track:

• Automation Rate: Percentage of GRC evidence collected automatically via Sprinto APIs vs. manual uploads (Target: >80% of technical controls).
• Mean Time to Remediate (MTTR): Tracking the speed of resolving critical vulnerabilities identified by SonarCloud or GCP SCC.
• Tool Coverage: Ensuring 100% deployment of CrowdStrike and Twingate across all relevant endpoints and cloud workloads.
• DRP Readiness: Successful execution of technical recovery playbooks during scheduled Disaster Recovery tests.

Qualifications

• Experience: 4+ years of hands-on Security Engineering experience in a cloud-native (GCP preferred) environment.
• The Automation Mindset: Strong scripting skills (Python, Bash, or Go) and experience working with REST APIs to connect disparate security tools.
• GCP Hands-on: Practical experience with GCP IAM, Networking, Log Router, and GKE (Google Kubernetes Engine).
• Endpoint & Perimeter Expert: Proficiency in tuning EDR policies (CrowdStrike) and managing modern access tools (Twingate/JumpCloud).
• AppSec Foundational Knowledge: A solid understanding of the OWASP Top 10 and experience integrating security tools into GitHub Actions pipelines.
• Attention to detail, plus analytical and problem-solving capabilities.
• Positive, service-oriented personality.
• Willingness to travel to our global locations.
• Eager to bring unique talents and authenticity to the CellPoint Digital community.
• Constantly curious and a lifetime learner.
• Excellent communication and relationship-building skills.
• Enjoy leading and supporting cross-functional initiatives and projects in a team where you are empowered and accountable.
• Thrive in a fast-paced environment and the challenge of managing multiple projects simultaneously while prioritizing high-return work.
• Approach challenges with a solution-oriented mindset.
• Able to thrive in a ‘remote first’ arrangement with a distributed organization in multiple time zones.

Benefits

• Opportunity to be an innovator, challenge the status quo, and redefine the payments category.
• Competitive salary in a fast-growing start-up.
• Opportunity for personal and professional growth in a dynamic industry.
• Work from anywhere in the world; we're a fully distributed company.