Security Engineer

What you'll do:

• Be a security authority and respond to any internal security engineering questions/requests
• Work with other teams to entrench a culture of security throughout the product lifecycle and help architect solutions that are inherently secure
• Correctly balance security risk and product advancement
• Work towards providing a minimum number of false positives and provide automated responses to alerts produced by our monitoring tools
• Lead the implementation of bug fixes on discovered bugs or vulnerabilities, whether they are discovered by your own vulnerability mgmt. tools or as part of our bounty program
• Be involved in reactive incident response when a security event occurs
• Perform research to detect new attack vectors
• Architect and create frameworks that prevent current and future attack scenarios
• Create and execute training exercises to advance users’ security knowledge
• Research, architect, and execute solutions that will advance internal security monitoring & controls

What you need:

• 2-4yrs of security experience
• Experience with vulnerability management software (e.g., Rapid7) to test and identify systems and network vulnerabilities
• Experience managing and/or being part of a bounty program
• Penetration testing experience
• Prior experience as an incident response engineer in a 24x7 worldwide organization
• Prior experience leading a user awareness program (phishing exercises, user training…)
• Prior experience with the Microsoft 365 Defender suite and Microsoft Azure’s security related features (PIM, Conditional Access Policies, Cloud App security…)
• Knowledge of email systems and concepts such as DKIM, DMARC, SPF…
• Familiarity with core security frameworks (e.g., PCI DSS, NIST 27001, NIST CSF, CIS…)
• Experience ensuring that the organization’s data and infrastructure are protected by enabling the appropriate security controls
• Familiarity with change management processes
• Superb problem-solving skills
• Ability to clearly report on the security posture of the organization