Senior Security Engineer

BisectHosting is hiring a Senior Security Engineer to take ownership of security across our entire business, from infrastructure and application security to employee awareness and internal operations.

We're looking for someone who thrives in a fast-moving, startup-like environment, enjoys wearing multiple hats, and isn't afraid to get their hands dirty. You'll have the freedom and responsibility to identify risks, set priorities, and implement solutions without needing constant direction.

This is a highly hands-on role. One day you might be reviewing code for vulnerabilities, the next conducting penetration tests, securing internal tools, or training employees on social engineering risks. You'll work directly with engineering and leadership to build practical security measures that protect our customers, employees, and infrastructure without unnecessarily slowing down the business.

What you'll work on:

• Own and continuously improve security across applications, infrastructure, internal systems, and business operations
• Conduct security-focused code reviews, identify vulnerabilities, and work directly with engineers to implement fixes
• Perform hands-on penetration testing and vulnerability assessments across web applications, APIs, networks, and infrastructure
• Secure internal and external APIs through proper authentication, authorization, access controls, and credential management
• Own identity and access management (IAM), including employee permissions, role-based access controls, least-privilege policies, and regular access audits
• Establish practical security standards for internal tools, third-party services, cloud environments, and production infrastructure
• Lead employee security awareness initiatives, including phishing simulations, social engineering testing, and security training
• Identify risks in everyday employee workflows and implement technical or procedural safeguards to reduce exposure
• Implement and maintain security monitoring, vulnerability scanning, threat detection, and incident response processes
• Build automated security checks into development workflows, including code scanning, dependency auditing, and CI/CD security controls
• Investigate security incidents, identify root causes, and implement preventative improvements
• Independently identify, prioritize, and execute security initiatives based on business risk and impact
• Work across departments to solve security problems, even when they fall outside traditional engineering responsibilities