Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and oversee tools and libraries that assist engineers in deploying secure software.

• Integrate security as a core component of our DevSecOps and CI/CD pipeline.

• Identify and address security vulnerabilities within our software.

• Manage compliance audits, including SOC2.

• Produce documentation that provides security guidance.

• Collaborate with various teams throughout the organization to advocate for secure development practices and foster a robust security culture.

• Ensure we maintain an acceptable rating on security benchmarks.

• Lead security initiatives such as external penetration tests.

• Monitor systems and networks to detect vulnerabilities or breaches.

• Identify infrastructure and application-level vulnerabilities during internal audits.

• Conduct reviews of system designs and advise engineers on incorporating security into our architecture.

⛳️ Requirements

• Bachelor’s degree in a related field along with a minimum of 10 years of experience.

• Over 5 years of experience working as a security engineer.

• Familiarity with managing internal and external security audits and conducting penetration tests.

• Proficiency in any combination of the following areas: threat modeling, secure coding, identity management and authentication, network security, and secrets management.

• Experience in incident management, including creating workflows, action plans for responding to security incidents, documenting incidents, and coordinating post-mortem reports.

• Knowledge of network and web-related protocols (such as TCP/IP, UDP, IPSEC, HTTP, HTTPS, and routing protocols).

• Experience in integrating and fine-tuning network security infrastructure.

• Background in cryptography (AES, Scrypt, etc.).

• Understanding of web services.

• Security experience within GCP environments.

• Experience in security implementation (OWASP).

• Knowledge of network stack/protocols, SSO, OAuth 2.0, and Active Directory.

• Familiarity with security and compliance audits (such as GDPR and SOC2).

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work opportunities.

• Professional development and training programs.

• Competitive salary and performance-based bonuses.

• Generous vacation and leave policies.