Staff Security Engineer

Who you are

• 10+ years of experience in Security and/or Cloud Operations
• Strong written and oral communication skills
• Hands-on experience with AWS
• Direct experience with intrusion prevention systems
• Experience with system logging and SIEM technologies
• Experience with cloud native security tools (e.g., IAM, WAF)
• Experience integrating Okta as an IdP into security processes
• Knowledge of incident response processes and practices
• Hands-on experience with vulnerability management tools, technologies, and methods
• Proven ability to integrate security practices into IT and/or DevOps environments
• Experience automating security processes
• Knowledge of Python and Golang
• Cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer, or Certified Cloud Security Professional (CCSP)

What the job involves

• As a Staff Security Engineer, you will be a valuable member of the IT and Information Security teams, managing and improving the organizational security posture
• You will help protect sensitive data by implementing and continuously monitoring a secure cloud architecture
• You will work with the security toolchain in cloud environments and support the development of security best practices and standards
• Your responsibilities will also include managing vulnerability scanning and remediation efforts, responding to security alerts under supervision, and leading in root cause analysis
• You will own the DAST and SAST solutions and be a key member of the incident response processes, tracking cyber actions from initial detection to final resolution
• Analyze the organizational security posture and seek improvements on a continuous basis
• Implement and manage security solutions and controls for cloud-based infrastructure, platforms, and applications
• Conduct security assessments and audits of cloud environments to identify and remediate security vulnerabilities and misconfigurations
• Manage and optimize cloud-based security tools (e.g., EDR solutions)
• Respond to security alerts and conduct root cause analysis
• Perform incident response and track cyber actions from initial detection to final resolution
• Work with the IT team to broaden the Zero Trust framework
• Collaborate with cross-functional teams, including DevOps, IT, and development teams, to integrate security into the software development lifecycle (SDLC) and DevSecOps practices
• Automate security solutions to drive continuous compliance across the infrastructure
• Stay up-to-date with industry trends, emerging threats, and best practices in cloud security, and recommend security enhancements and improvements as needed

Benefits

• Health and wellness: Our comprehensive benefits prioritize the well-being of you and your family, offering premium medical, dental, vision, and life insurance. Additionally, our wellness initiatives encompass mental health support and fitness incentives
• Programs for parents: Birthing parents receive up to 18 weeks of fully paid leave, while non-birthing parents enjoy 8 weeks. We also provide coverage for in vitro fertilization and egg-freezing
• Home-office stipend: All new hires are offered stipends for home office setup and mobile phone and home internet expenses
• Flexible time off: We value rest and rejuvenation outside of work and offer generous and flexible time off in addition to 12 paid holidays
• Retirement/401K: Start now to save for your future. We offer financial benefits and services to give you financial peace of mind