Senior Security Engineer
New York, NY (Rent the Runway HQ)
Rent the Runway is transforming the way modern women get dressed and disrupting the $2.4 trillion global fashion industry by enabling women to rent, versus buy, clothing. Founded in 2009 with a vision to build the world’s first living closet, RTR believes that women everywhere will soon have a subscription to fashion. Rent the Runway has pioneered a new industry by transforming the traditional model of clothing consumption, making apparel rental an indispensable utility while also powering women to feel their best every day. RTR offers apparel, accessories and home decor from over 700 designer partners and has built in-house proprietary technology and a one-of-a-kind reverse logistics operation. Under CEO and Co-Founder Jennifer Hyman’s leadership, Rent the Runway has been named to CNBC’s “Disruptor 50” five times in ten years, and has been placed on Fast Company’s Most Innovative Companies list multiple times.
About the Team:
We are currently growing our Information Security team in order to protect and scale our enterprise as well as meet ongoing compliance requirements. Our team works closely with IT, Infrastructure, and Engineering to ensure the security posture of mission critical production environments, build security into the software development life-cycle, as well as deploy and maintain security tooling and processes.
About the Job:
The Senior Security Engineer will report directly to the VP, IT, Security and Compliance and will be a driving force in setting the security and compliance roadmap for the organization. You will be responsible for hands-on design, engineering, configuration and integration of security solutions that provide confidentiality, integrity, availability, authentication, and non-repudiation to meet stated security and compliance objectives.
What You'll Do:
- Work closely with the head of security to understand goals and determine security and compliance requirements
- Drive the selection, POC, implementation and operational deployment of new security technology solutions to ensure the confidentiality, integrity and availability of business data
- Design and implement application, network, and data security solutions to meet business objectives, IT strategic initiatives, corporate and regulatory requirements
- Partner with engineering teams to integrate security controls into continuous integration, delivery and deployment processes
- Maintain and improve the existing security tool sets; including Splunk and SIEM technologies
- Generate and document operational processes, procedures, and metrics
- Cyber incidents identification and activation of incident response procedures
- Build strong relationships with RTR’s cross functional teams and cultivate a culture of security awareness and ownership
- 5+ years of experience providing technical leadership within the security domain, including managing delivery of complex projects, mentoring, acting as a role model for other engineers and evaluating complex tradeoffs and priorities
- Degree in computer science, software engineering, or cybersecurity with 3+ years of programming experience with various languages like Java, C#, Python, C++, Go, Scala
- Understanding of Software Security Architecture and Design, SDLC and the ability to clearly articulate best practices for application security
- Experience in DevOps environments and automating security controls into the CI/CD process
- Experience with Jenkins or other CI tools and knowledge of technologies like containers like Docker and Kubernetes
- Experience in configuration and maintenance of Splunk as a SIEM
- Strong knowledge of web applications security practices
- Professional certifications in information security management, such as a CISSP or CISM
- Strong familiarity with information security frameworks (e.g. NIST, CIS, or ISO) and experience architecting solutions to meet compliance requirements (e.g. PCI-DSS, GDRP, CCPA)
- Ability to formulate a clear and actionable plan and execute against it
- Can successfully work in a fast paced, agile environment
At Rent the Runway, we’re committed to the happiness and wellbeing of our employees, and aim to create a workplace that fosters both personal and professional growth. Our benefits include, but are not limited to:
- Generous Paid Time Off including vacation, paid bereavement, and family sick leave - every employee needs time to take care of themselves and their family.
- Universal Paid Parental Leave for both parents + flexible return to work program - because we know your newest family member(s) deserve your undivided attention.
- Paid Sabbatical after 5 years of continuous service - Unplug, recharge, and have some fun! .
- Comprehensive health, vision, dental, FSA and dependent care from day 1 of employment - Your health comes first and we’ve got you covered.
- Industry leading 401k match - an investment in your future.