Cyber Security Engineer

Cybersecurity Engineer

Bectran's infrastructure is central to enterprise credit and financial operations, and ensuring its security is a responsibility we regard with utmost seriousness. We are in search of a highly motivated and proactive Cybersecurity Engineer who takes pride in helping safeguard the systems, data, and personnel that underpin our platform. The successful candidate will possess a strong foundation in cloud security, application security, and endpoint protection, along with a genuine curiosity for identifying and mitigating security risks. This individual will work closely with DevOps, Engineering, and Leadership teams, applying developing technical skills, a collaborative mindset, and effective communication to help strengthen Bectran's security posture.

What You Will Do:

• Assist with administering CrowdStrike Falcon and Microsoft Defender across endpoints and email. Monitor security alerts, help maintain DLP policies, and support employee phishing awareness initiatives and security best practices.
• Support the implementation and maintenance of SAST, DAST, SCA, and CSPM tools within CI/CD pipelines. Participate in secure code reviews and learn secure development practices while collaborating with engineering teams.
• Monitor AWS security services including CloudTrail, GuardDuty, VPC Flow Logs, WAF, and Security Hub. Assist with reviewing suspicious activity and implementing security controls such as IAM permissions, IP allowlists, and WAF rule updates under guidance.
• Review and triage findings from AWS Security Hub, Inspector, and IAM Access Analyzer. Assist with certificate renewals, VPN maintenance, and validating encryption configurations following established procedures.
• Monitor SIEM and IDS/IPS alerts for suspicious activity and escalate potential security incidents. Assist with rule tuning and documentation to improve alert quality and visibility.
• Use Datadog to review security logs, investigate alerts, and assist with monitoring cloud and application environments for unusual activity.
• Track security vulnerabilities (CVEs) affecting the technology stack, assist with remediation efforts, participate in vulnerability assessments, and support incident response activities following documented procedures.
• Support SOC 2 compliance efforts by maintaining documentation, gathering audit evidence, updating security controls, and assisting with security tooling administration and reporting.

What You Need to Be Successful:

• Bachelor's or Master's degree in Computer Science, Engineering, or a related field (Master's degree preferred).
• 0–3 years of experience in cybersecurity, information security, DevSecOps, cloud security or a related technical role.
• Hands-on AWS security expertise including GuardDuty, Security Hub, WAF, Inspector, IAM Access Analyzer, CloudTrail, VPC Flow Logs, and S3 access logging across multi-account environments.
• Familiarity with identity and access management (IAM), least-privilege principles, and encryption concepts for protecting data at rest and in transit.
• Experience with SAST, DAST, SCA, or dependency scanning tools and familiarity with CI/CD concepts using GitHub Actions, AWS CodeDeploy, or similar platforms.
• Hands-on EDR experience with CrowdStrike Falcon (required) and Microsoft Defender; working knowledge of Datadog for security monitoring and alerting.
• Understanding of networking fundamentals including TCP/IP, DNS, VPNs, firewalls, SSL/TLS, and common network protocols. Basic Linux administration experience preferred.
• Exposure to vulnerability assessments, security testing, or Capture the Flag (CTF), Hack The Box, TryHackMe, academic labs, or internship experience is preferred.
• Familiarity with incident response processes including alert triage, escalation, remediation, and documentation through coursework, internships, or professional experience.
• Basic understanding of cybersecurity frameworks such as NIST CSF, CIS Controls, and OWASP Top 10. Exposure to SOC 2, ISO 27001, or other compliance frameworks is a plus.
• Understanding of secure coding practices with the ability to guide and advise engineering teams directly.

Preferred Qualifications:

• Entry-level or associate certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity (CC), AWS Certified Cloud Practitioner, or AWS Certified Security – Specialty (completed or in progress).
• Exposure to Java, Spring Boot, Docker, Kubernetes, or cloud-native applications through coursework, internships, or projects.
• Basic scripting skills in Python, Bash, or PowerShell with an interest in automating security tasks.
• Familiarity with AI/LLM security risks—OWASP LLM Top 10, prompt injection, data leakage, and shadow AI governance.
• Experience in fintech, SaaS, cloud environments, or exposure to PCI DSS or other compliance requirements through internships or coursework is a plus.

Who We Are:

Since its inception in 2010, Bectran has pioneered cost-effective credit management and accounts receivable automation solutions for all sizes of organizations. Bectran's SaaS solutions — credit, collections and accounts receivable — provide seamless user experiences across various industries and empower users with robust credit evaluation services, providing more oversight, control and efficiency to companies of all sizes. Our dedication to improving the efficiency of the order-to-cash cycle has helped companies cut down the time to process and approve credit by over 90% while significantly lowering the risk of default. We are committed to helping businesses make the transition to powerful SaaS technology solutions that save you time and money.

Compensation & Benefits:

• 100% paid medical coverage through Blue Cross Blue Shield (choice of PPO and HSA plans).
• 100% paid dental, vision, and life insurance through Principle.
• Options to participate in Health Savings Account (HSA) and Flexible Spending Account (FSA) plans.
• Short-term and long-term disability (STD/LTD) plans available for employee election through Principle.
• Retirement savings plan with a 401(k) offering Roth and traditional contributions through Principal.
• 15 days of Paid time off (PTO) and 8 holidays off annually.

EEO Statement:

Bectran is an equal employment opportunity and affirmative action employer. We provide equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, we comply with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. Bectran embraces diversity and promotes a culture of equity and inclusion where every individual is empowered to thrive. Employees are valued for their skills, experience, and unique perspectives. This commitment is reflected in our company policies and practices and is a fundamental principle of how we conduct business.

Application Instructions:

To apply, please submit resume through the listed posting or at our webpage. Applications will be accepted until the position is filled or the posting is removed. Applicants with disabilities may contact us at View email address on click.appcast.io to request reasonable accommodations during the hiring process.

As Bectran continues to expand in the Fintech SaaS industry, we are seeking intelligent, energetic, and skilled individuals to join our team. If you are ready to launch your career at an industry leading company, we want to hear from you!