Senior Security Engineer
New York City
Applications have closed
Justworks, Inc.
Run your small business with Justworks’ simple PEO & payroll solutions. From HR software & compliance to company benefits, get expert support now!At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people.
We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you.
We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team.
If this sounds like you, you’ll fit right in.
Who You AreYou are a technical expert in security engineering and architecture with a business mindset to establish technical programs aligned with Justworks’ risk posture. You are a highly motivated, strong communicator who understands security architecture and engineering. You are a technical expert in security engineering and architecture with experience executing a modern, cloud-native security architecture program aligned with Justworks’ risk posture.
As a Senior Security Engineer, you will be hands-on in driving the execution of the company’s Security Architecture & Engineering function. This Senior Security Engineer will report to the Director of Security Architecture & Engineering.
Your Success ProfileWhat You Will Work On
- Technical design reviews to evaluate existing security controls and identify opportunities to enhance the security posture of Justworks
- Bring adequate security capabilities to Justworks across multiples domains such as:network and infrastructure, application security, identity and access management, data protection, and support Security Operations and GRC (Governance, Risks and Compliance)
- Provide technical and architectural guidance to product managers, product engineers, and corporate IT on digital security
- Implement security capabilities in AWS and for corporate. Work with the team to execute and deliver the roadmap.
- Develop security architecture, design, and coding standards across the Justworks applications and infrastructure to promote a standardized set of security requirements, aligning with internal policies and meeting external compliance requirements.
- Work collaboratively with the current product managers and staff engineers or future Enterprise Architecture team to design and implement enterprise security capabilities into solution architecture
- Participate in major new product development projects to ensure that appropriate security controls are built into systems prior to production cutover.
- Drive process improvement and control implementation projects in coordination with the larger Digital Technology team at Justworks.
- Act as a cross-functional tools and services expert, working with engineering and risk teams to build security control requirements
- Help Security Operation Center triage incidents as need especially related to product security, application security and AWS security
How You Will Do Your Work
As a Senior Security Engineer, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:
- Demonstrated expertise in security architecture, design, and secure coding practices with a focus on scaling solutions for complex enterprises, ideally in a SaaS environment
- Hands-on technical expertise with depth in modern cloud-based security architecture and engineering in an AWS environment
- Technical experience with DevOps, Jira, and other agile automation tools
- (Preferred) Security Certifications: CISSP, CISM, CRISC, GIAC, CCSP or CEH
- Proven track record as a strong communicator
- Strong analytical skills
- Exceptional organizational skills
Qualifications
- At least 3+ years' experience in information security concepts, common technical security controls, and security architecture design principles, ideally in a SaaS environment
- Extensive experience in security architecture, system design, and engineering scalable security solutions in a cloud-native (AWS) environment
- Experience with secure coding practices and security scanning technologies
- Background as a software engineer, security architect, or security engineer with experience implementing DevSecOps
#LI-KY1
Please Note: We believe Justworks has a responsibility to support efforts to get as many people vaccinated as possible. We’re committed to safeguarding the well-being of our employees, their families and the broader community from the risks associated with COVID-19. Because this position requires onsite work, this position will require the successful candidate to show proof of vaccination against COVID-19. As an equal opportunity employer, Justworks will provide reasonable accommodation to those individuals who are unable to be vaccinated in accordance with its obligations pursuant to applicable federal, state, provincial, and local law.
Diversity At JustworksJustworks is committed to maintaining a workplace where diversity of identity, culture, and life experience is the norm and is celebrated authentically and respected consistently. Diversity in our work, our people, and our product drives creativity and innovation, entrepreneurial leadership and integrity, competitiveness, and collaboration throughout our business and in the market. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our customers.
We’re proud to be an equal opportunity employer open to all qualified applicants regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, veteran status, or any other legally protected status.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Agile Application security Automation AWS CCSP CEH CISM CISSP Cloud Compliance CRISC DevOps DevSecOps GIAC Governance IAM Jira Product security SaaS
Perks/benefits: Career development Startup environment Team events
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Ethical hacker / Pentester H/F jobs
- Open Information Security Specialist jobs
- Open Senior Cyber Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Manager Pentest H/F jobs
- Open Cyber Security Architect jobs
- Open Product Security Engineer jobs
- Open Cyber Security Specialist jobs
- Open Staff Security Engineer jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Senior Information Security Analyst jobs
- Open Cybersecurity Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Chief Information Security Officer jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Consultant jobs
- Open Consultant SOC / CERT H/F jobs
- Open Security Specialist jobs
- Open Senior Information Security Engineer jobs
- Open Senior Penetration Tester jobs
- Open Cybersecurity Specialist jobs
- Open Security Researcher jobs
- Open Senior Security Architect jobs
- Open Sr. Security Engineer jobs
- Open Security Operations Analyst jobs
- Open CISM-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open ISO 27001-related jobs
- Open Application security-related jobs
- Open Pentesting-related jobs
- Open Agile-related jobs
- Open Vulnerability management-related jobs
- Open GCP-related jobs
- Open SaaS-related jobs
- Open Analytics-related jobs
- Open CISA-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open APIs-related jobs
- Open Java-related jobs
- Open Security assessment-related jobs
- Open Security Clearance-related jobs
- Open Malware-related jobs
- Open DevOps-related jobs
- Open IDS-related jobs
- Open EDR-related jobs
- Open CEH-related jobs
- Open Kubernetes-related jobs
- Open Forensics-related jobs