Security Engineer - Remote

Overview

ezCater is the leading food for work technology company in the US, connecting anyone who needs food for their workplace to over 100,000 restaurants nationwide. For workplaces, ezCater provides flexible and scalable solutions for everything from recurring employee meals to one-off meetings, all backed by 24/7 customer service with real humans. ezCater also enables companies to manage their food spend in a single, customizable platform. For restaurant partners, ezCater helps them grow their business by bringing them more orders and new high-value customers. We're backed by top investors including Insight, Iconiq, Lightspeed, GIC, SoftBank, and Quadrille.

In Short

• Collaborate with Technology and Product teams to conduct security assessments, ensuring code and infrastructure changes align with SOC 2, PCI-DSS, and internal policies.
• Automate compliance and control activities such as risk assessments, vulnerability scanning, third party risk management, and control validation.
• Create monitoring and detective alerts for security operations, non-compliance, and incident response.
• Responsible for maintaining a healthy posture of our security tools and automations.
• Provide support for third-party assessments from customers and audit evidence collection and review.
• Expand beyond purely identifying gaps and risks, and own the design and implementation of monitoring and remediating them.
• Span across multiple security domains, you’ll be able to flex into technical and non-technical roles to drive risk detective and mitigative projects.

Requirements

• Experience with development and scripting languages (Ruby, Go, Python) and leveraging APIs to automate workflows.
• Articulate about risk management and compliance controls relating to industry best practices and frameworks.
• Experience performing and remediating risk and control gap assessments.
• Knowledge of Governance, Risk & Compliance (GRC) frameworks, Security Operations Center (SOC) processes, IT Security protocols, and privacy practices.
• Someone who is willing to challenge the existing norms and “Aim Higher, Make it Better” than the way it currently is.
• A continuous learning mindset to stay current with the latest security trends, threats, and technologies.

Benefits

• Market competitive salary.
• Stock options that you’ll help make worth a lot.
• 12 paid holidays.
• Flexible PTO.
• 401K with ezCater match.
• Health/dental/FSA.
• Long-term disability insurance.
• Mental health and family planning resources.
• Remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office.
• A tremendous amount of responsibility and autonomy.