Associate Security Engineer

Role Overview

Bridgeway is hiring an Associate Security Engineer to support the development and maintenance of security programs across corporate, engineering, product, compliance, and governance. You’ll help build scalable security solutions, support secure operations, and contribute to compliance-aligned security practices with guidance from senior engineers.

Responsibilities

• Assist in designing and implementing security solutions with mentorship.
• Help build Infrastructure-as-Code (IaC) to enforce security policies and automate cloud configurations.
• Maintain and improve CI/CD pipelines, automating repetitive tasks and improving efficiency.
• Collaborate with development and platform engineering teams to meet security needs.
• Support SIEM maintenance and log ingestion pipelines for monitoring, alerting, and threat detection.
• Assist with incident response playbooks, including testing for operational readiness.
• Monitor emerging threats and help operationalize threat intelligence, including MITRE ATT&CK alert mapping.
• Support vulnerability management and cloud security posture management, including scanning and configurations (e.g., WAF, DLP).
• Help implement enterprise app governance and mobile application management (MAM) with application teams.
• Assist with cloud hardening guidelines, including review of firewall rules, security groups, and domain controllers.
• Support security integration into SDLC and participate in feature design reviews.
• Under senior guidance, review customer/vendor security clauses in contracts.
• Coordinate phishing simulations and security awareness programs (e.g., KnowBe4), producing training materials.
• Support third-party penetration testing efforts for mobile and web apps.
• Maintain compliance documentation and contribute to network diagrams/dataflow documentation.
• Participate in an on-call rotation to respond to incidents outside business hours as needed.

Requirements

• 1+ years of professional engineering experience.
• Familiarity with information security fundamentals.
• Foundational knowledge of cloud platforms.
• Basic proficiency in scripting and automation.
• Intermediate proficiency with IaC and CI/CD pipeline tools.
• Basic understanding of containerization/orchestration concepts (e.g., ECS, ACA, K8s, Docker).
• Strong analytical and troubleshooting skills; ability to escalate critical issues with recommendations.
• Bachelor’s degree in Information Technology, Software Development, or related field.

Nice to Haves (Inferred from Responsibilities)

• Hands-on exposure to SIEM/log ingestion, CI/CD security, threat intelligence, MITRE ATT&CK, and security posture/vulnerability management.
• Experience supporting incident response and security awareness activities.