Staff Security Engineer

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Assess the security posture of the organization and pursue ongoing enhancements.

• Deploy and manage security solutions and controls for cloud-based infrastructures, platforms, and applications.

• Carry out security assessments and audits of cloud environments to detect and rectify vulnerabilities and misconfigurations.

• Oversee and optimize cloud-based security tools, including Endpoint Detection and Response (EDR) solutions.

• Address security alerts and perform root cause analyses.

• Execute incident response procedures and monitor cyber actions from initial detection to final resolution.

• Collaborate with the IT team to expand the Zero Trust framework.

• Partner with DevOps, IT, and development teams to incorporate security into the Software Development Life Cycle (SDLC) and DevSecOps methodologies.

• Automate security solutions to ensure ongoing compliance across the infrastructure.

• Keep up-to-date with industry trends, emerging threats, and best practices in cloud security, recommending enhancements as necessary.

• Manage and enhance the organizational security stance.

• Establish and continuously monitor secure cloud architectures.

• Oversee Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) solutions.

• Assist in the development of security best practices and standards.

⛳️ Requirements

• Over 10 years of experience in Security and/or Cloud Operations.

• Excellent written and verbal communication abilities.

• Practical experience with AWS.

• Direct experience with intrusion prevention systems.

• Familiarity with system logging and Security Information and Event Management (SIEM) technologies.

• Experience with cloud-native security tools, including Identity and Access Management (IAM) and Web Application Firewall (WAF).

• Background in integrating Okta as an Identity Provider (IdP) into security workflows.

• Understanding of incident response processes and practices.

• Hands-on experience with vulnerability management tools, technologies, and methodologies.

• Demonstrated ability to embed security practices into IT and/or DevOps environments.

• Experience in automating security processes.

• Knowledge of Python and Golang (preferred).

• Relevant cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer, or Certified Cloud Security Professional (CCSP) (preferred).

• Capability to meet the applicable U.S. government contract requirements.

🏝️ Benefits

• Flexible vacation policy.

• Wellness Days.

• Full paid leave for parents of expanding families.

• Complete medical coverage.

• Comprehensive dental coverage.

• Full vision coverage.

• Fertility benefits through Carrot.

• On-demand mental health coverage with Headspace Care+.

• Gympass+ Membership via Wellhub.

• One Medical Membership.

• 401(k) plan.

• Remote work stipends.

• Monthly internet allowance.

• Competitive salary.

• Comprehensive benefits package.