Security Engineer - Remote

Overview

You’ll be joining an impactful team of highly skilled engineers who are building the core platform features and services to fuel our rapidly growing company! As a team, we are always working to continuously improve both our product and our craft. The Engineering team will focus on developing world-class services and integrations, all the while ensuring to keep our apps secure, high-performing, and most importantly scalable.

In Short

• Implement essential security projects.
• Help maintain a Vulnerability Management program.
• Help define and evangelize requirements and guidance for security best practices.
• Participate in security incident management, evaluation, assessment, and testing for vulnerabilities across web and mobile applications as well as cloud infrastructure and internal networks.
• Provide information and vulnerability notices to the team from Threat Hunting.
• Collaborate with product and engineering teams to improve security visibility, monitoring, hardening, and operational response.
• Manage and configure security controls on endpoint solutions such as GSuite, SSO, Data Loss Prevention, and firewalls.
• Routinely manage engagements such as tabletop, red team exercises, or bug bounties.

Requirements

• Bachelor's degree in Cloud/Network Security, Computer Science, or equivalent experience.
• 4+ years of experience as a Security Engineer.
• Proficient in one or more programming languages such as Python, Ruby or Rust.
• Experience with cloud services such as AWS, Azure, or GCP.
• Experience implementing detective controls and security processes like static and dynamic code analysis.
• Experience with vulnerability management remediation.
• Strong knowledge of security best practices, standards, and frameworks.

Benefits

• Management of audits and security standards such as ISO 27001 and SOC 2.
• Knowledge of requirements such as data residency and GDPR.
• Experience in offensive security engagements like pentesting.
• Familiarity with static code analysis and/or fuzz testing.
• Experience with AWS security and tools such as Inspector, Detective, GuardDuty, and WAF.