Senior Security Engineer - Full-time / Part-time

100% remote Senior Security Engineer Needed for a growing tech co $95MM in Funding

This Jobot Job is hosted by: Amber Heigerick
Are you a fit? Easy Apply now by clicking the "Apply Now" button and sending us your resume.
Salary: $170,000 - $200,000 per year

A bit about us:

As the leading semantic layer platform for data and analytics, we enable better decision-making through accelerated flow of data-driven insights. Whether our clients store their data in warehouses, lakes, marts, or cloud emerging cloud platforms, we provide a single view of their data for key stakeholders to make real-time decisions. Our clients include JPMorgan, Toyota, Wells Fargo, and many more.

We are looking for a Sr. Security Engineer to help design, develop, and lead cross-functional efforts to secure both our infrastructure and application services. You will support documentation for compliance and contribute to procedures for system reliability and incident response.

Why join us?

• Strong competitive compensation + equity
• Full Health Benefits; Medical/Dental/Vision/Life Insurance + Paid Parental Leave
• Work with the latest technologies
• Join an amazing team you will never want to leave.
• 100% remote

Job Details

Responsibilities:

• Design, document, and execute a security and compliance program for infrastructure and apps
• Deploy, configure, and monitor security tools from endpoint solutions to code testing with CI/CD
• Conduct regular security assessments of our apps and architecture through penetration tests, vulnerability scans, threat modeling, and manual inspection
• Monitor security, drive response to vulnerabilities, and coordinate with incident responders
• Advise developers on resolving security findings to drive security compliance

What you must have experience with:

• Security considerations such as isolating environments using network configurations, RBAC, security groups, bastion hosts or amazon workspaces, firewall setups
• Securing AWS infrastructure using tools like Audit Manager, Inspector, CloudTrail, Security Hub, GuardDuty, CloudWatch, CloudTrail, WAF, Shield, Secrets Manager, Cognito, KMS, and IAM for regulations such as SOX, GDPR, PCI
• Code scanning procedures such as SCA, SAST, DAST, and related frameworks/tools such as OWASP, veracode or blackduck.
• Vulnerability analysis, pen testing, and patch prioritization
• Security best practices such as least privilege, RBAC, protocols, authentication, authorization, endpoint security, network security, logging, and observability
• Pen testing tools (Kali Linux, BurpSuite, nmap, metasploit, etc.)

Interested in hearing more? Easy Apply now by clicking the "Apply Now" button.