We're seeking a Senior Security Engineer at BambooHR, who will be responsible for designing, implementing, and maintaining security measures to protect our systems, networks, and data from unauthorized access and cyber-attacks. You will work closely with cross-functional teams to assess vulnerabilities, develop robust security architectures, and provide expert guidance on best practices in the realm of cybersecurity.

Essential Job Duties

• Security Architecture Design:
  • Collaborate with other teams to design and implement robust security architectures for systems, networks, and applications.
  • Conduct security reviews and assessments to identify vulnerabilities and propose effective mitigation strategies.
• Security Operations:
  • Lead incident response efforts, investigating and resolving security incidents in a timely manner.
  • Monitor and analyze security alerts, conduct regular security assessments, and implement continuous improvement initiatives.
• Risk Management:
  • Evaluate and prioritize security risks, and develop strategies to mitigate those risks.
  • Work with stakeholders to ensure that security measures align with business objectives while maintaining a strong security posture.
• Security Policies and Compliance:
  • Develop and enforce security policies, procedures, and standards.
  • Ensure compliance with relevant regulatory requirements and industry best practices.
• Security Awareness and Training:
  • Provide training and awareness programs to educate employees on security best practices.
  • Stay current with industry trends and emerging threats to continuously enhance the organization's security posture.
• Collaboration and Leadership:
  • Collaborate with cross-functional teams, including IT, development, and operations, to integrate security measures into the development and operational processes.
  • Mentor and provide guidance to junior security team members.

What You Need to Get the Job Done

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• 7 years of experience in a security engineering role, with a focus on designing and implementing security solutions.
• Professional certifications such as CISSP, CISM, or equivalent are highly desirable.
• Solid understanding of networking protocols, information security concepts, and security best practices.
• Experience with security tools and technologies, such as SIEM, IDS/IPS, firewalls, and endpoint protection.
• Excellent communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Proven ability to lead and drive security initiatives in a collaborative and fast-paced environment.

What You'll Love About Us

• Great Company Culture. We’ve been recognized by multiple organizations like Inc, Salt Lake Tribune, Glassdoor, & Comparably for our great workplace culture.
• Make an Impact. We care about your individuality by giving you freedom to grow and create within the company, regardless of your position.
• Rest and Relaxation. 4 weeks paid time off, 11 paid holidays, and we pay you to go on vacation (ask us about this)!
• Health Benefits. Medical with HSA and FSA options, dental, and vision.
• Prepare for the Future. 401(k) with a generous company match, access to a personal financial planner, and both legal and life insurance.
• Financial Peace University. We pay for a one year subscription and you walk away with financial savvy and a bonus.
• Give back. Get paid to give your time to the community: ask us about this!
• Educational Benefits. Whether you are a previous student, or currently enrolled in higher education, we can help cover some of those expenses.
• Flexible Work Models. In-office, work-from-home, or hybrid, depending on position and location.