22 hours ago Be among the first 25 applicants
You'll join a high-octane security team tackling offensive and defensive challenges. Whether diving into intricate web application pentesting or running purple team simulations, you'll collaborate with detection engineers, craft internal tools, challenge assumptions, and execute threat scenarios to fortify SOC operations.
Key Responsibilities
DevSecOps
* Operate as a SOC Tier 2 or Tier 3 engineer, swiftly triaging and resolving security incidents.
* Configure and harden security systems (antivirus, firewalls, OS security)
* Develop zero-day mitigation strategies when patches are unavailable
* Troubleshoot issues with tools like Antivirus, Qualys, or DNS filtering etc.
* Build automation scripts for deploying agents, policy cleanup, or custom security scanners.
Web Application Pentesting
* Execute precise manual and automated tests on web apps and APIs.
* Uncover OWASP Top 10 and elusive business logic vulnerabilities.
* Deliver clear, actionable PoCs and remediation guidance.
* Work closely with developers to guide secure coding and implement effective fixes.
Purple Team / Detection Engineering
* Participate in adversary simulations to test and enhance SOC defenses, conducted at least twice per quarter.
* Fine-tune detection rules across EDR and SIEM for maximum precision.
* Design and run internal threat scenarios to stress-test response capabilities.
* Enhance defender workflows through close collaboration and visibility improvements.
Requirements
* Deep system administration skills in Windows and Linux, with a security-first approach, adept at solving multi-layered OS, network, and configuration issues.
* Experience in incident response, threat hunting, or SOC Tier 2+ roles
* Proficiency with tools like Burp Suite, Nmap, SQLmap, or custom scripts
* Strong scripting skills in Python, Bash, or PowerShell for automation.
* Excellent written and verbal communication in English.
* Experience with vulnerability management platforms like DefectDojo for tracking and prioritizing security findings is a plus.
* A profile on platforms like Hack The Box, TryHackMe, or similar (please provide your profile link).
Bonus Points For
* Proven success in bug bounty programs with documented cases.
* Experience in purple team operations or red-blue collaboration.
* Familiarity with C2 frameworks, payload development, or adversary emulation
* Knowledge of cloud security (AWS, Azure, GCP).
* Certifications like OSCP, OSWE, CRTO, or equivalent.
Benefits
Salary Range: $4000-$6000 USD + bonus
Seniority level
* Seniority level
Mid-Senior level
Employment type
* Employment type
Full-time
Job function
* Job function
Other
* Industries
IT Services and IT Consulting
Referrals increase your chances of interviewing at Sur LATAM by 2x
Get notified about new Full Stack Engineer jobs in Greater Buenos Aires.
Intermediate Software Engineer (React.js, Node.js) - OP01727-OS
Full Stack React.js & C# Engineer - Work from home
Software Engineer - Front-end/ Full stack
BE2 Software Engineer (Python) (USD Salary & Full-time)
React + Node Developer – Web Applications
Software Development Engineer (Java/Node.js)
Java/React.js Full Stack Engineer (Middle) ID36054
Web Full Stack .Net and Vue.js Engineer (Remote, Latam)
Senior Software Engineer (Studio Blocks)
Java/React.js Full Stack Developer (Middle/Senior) ID34519
Full Stack Engineer (Middle/Senior) ID36289
Senior Fullstack Engineer (Frontend Oriented) - 100% Remote (LATAM)
Software Development Engineer (Full-stack Java/React)
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr