Forward Deployed Engineer

Job Description

About CheckRed: CheckRed is a cybersecurity company working at the cutting edge of cloud, SaaS, DNS, DDoS, and identity security. Our platform gives enterprises one place to see and fix security risks across their cloud infrastructure, business applications, and internet-facing assets.

\n

We unify posture management for cloud (CSPM), SaaS (SSPM), DNS (DNSPM), cloud-native applications (CNAPP), cloud identities and entitlements (CIEM), and cloud workloads (CWPP). Continuous compliance against frameworks like SOC 2, ISO 27001, NIST, PCI DSS, HIPAA, GDPR, and CIS is built in.

\n

\n

About the role: As a Forward Deployed Engineer, you will work alongside customers and internal teams to deploy, configure, and support CheckRed in real-world environments, solving technical challenges as they arise. You will translate customer needs into practical solutions and feedback that help shape the product.

\n

\n

You will also develop and improve technical documentation based on product capabilities and features. This is a hands-on, customer-facing engineering role where you will own deployments end to end, act as a trusted technical advisor to customers, and keep growing your security expertise quickly.

\n

\n

Deploy CheckRed

\n

\n
• Deploy, configure, and support DNS Security Posture Management (DNSPM), DDoS Security Posture Management (DDoSPM), Cloud Security Posture Management (CSPM), and SaaS Security Posture Management (SSPM).
\n
• Configure integrations, permissions, policies, and alerting to fit each customer's environment and security goals.
\n
• Validate data collection, asset discovery, security findings, and posture assessments across supported platforms.
\n

\n

\n

Solve technical challenges as they arise

\n

\n
• Diagnose DNS resolution, delegation, DNSSEC, and configuration problems.
\n
• Investigate BGP routing, ASN mappings, prefix advertisements, RPKI validation, and DDoS protection coverage issues.
\n
• Help customers interpret findings and prioritize remediation across cloud, SaaS, DNS, DDoS, and identity risks.
\n

\n

\n

Turn customer needs into product impact

\n

\n
• Gather requirements and pain points from customers and translate them into practical solutions.
\n
• Share structured feedback, feature requests, and field insights with Product and Engineering.
\n
• Build small scripts, automations, or configuration templates that make deployments faster and repeatable.
\n

\n

Grow and share your expertise

\n

\n
• Build deep knowledge of the CheckRed platform, cloud security, and compliance frameworks.
\n
• Mentor newer team members and share field knowledge across Customer Success, Product, and Engineering.
\n

\n

\n

Qualifications

\n

\n
• A degree in Computer Science, Information Security, Engineering, or a related field, or equivalent hands-on experience.
\n
• 2+ years of hands-on engineering experience in cloud security, networking, cybersecurity, infrastructure engineering, or forward deployed engineering
\n
• Hands-on experience deploying and securing workloads in at least one major cloud provider: AWS, Microsoft Azure, or Google Cloud.
\n
• Strong networking fundamentals: TCP/IP, UDP, DNS, TLS, routing, NAT, firewalls, load balancing, and network troubleshooting.
\n
• DNS and DNS security: Understanding of DNS resolution, authoritative and recursive DNS, DNS records (A, AAAA, CNAME, MX, TXT, NS), DNSSEC, and common DNS misconfigurations.
\n
• Programming and automation: Proficiency in Python and working knowledge of Bash or PowerShell, REST APIs, JSON, and Git.
\n
• Familiarity with Linux and the command line.
\n
• Clear written and verbal communication, including explaining technical topics to non-technical audiences.
\n
• Confidence owning customer relationships, including leading live troubleshooting calls with technical and executive stakeholders.
\n

\n

\n

Nice to have

\n

\n
• Certifications such as AWS Solutions Architect or Security Specialty, Microsoft AZ-500, Google Professional Cloud Security Engineer, CCSK, or CCSP.
\n
• Exposure to SaaS administration, for example Microsoft 365, Google Workspace, Okta, or Salesforce.
\n
• Familiarity with compliance frameworks such as CIS Benchmarks, SOC 2, ISO 27001, NIST, PCI DSS, HIPAA, or GDPR.
\n
• Experience with infrastructure as code (Terraform, CloudFormation) or containers and Kubernetes.
\n
• Understanding of DDoS attack types and mitigation concepts.
\n
• Experience writing technical documentation, ideally with docs-as-code tools like Markdown and Git.
\n

\n

\n

What were looking for

\n

\n
• Self-starter: you take ownership, find answers on your own, and move work forward without waiting to be told.
\n
• Quick learner: you pick up new technologies fast and enjoy going deep on unfamiliar problems.
\n
• Energized by pace: you do well in a fast-moving environment where priorities shift and customers need answers today.
\n
• Ambitious: you want to grow your career quickly and are ready to earn more scope and responsibility.
\n
• Customer-minded: you care about solving the real problem, not just closing the ticket.
\n

\n

\n

What you'll gain

\n

\n
• Fast career progression: a clear path toward Senior Forward Deployed Engineer, Solutions Architect, or team lead roles based on impact, not tenure.
\n
• Close collaboration with senior engineers, product leaders, and security experts.
\n
• Broad exposure to cloud, SaaS, DNS, DDoS, and identity security across real enterprise environments.
\n
• Direct influence on the product through the feedback you bring from the field.
\n

\n