The Role:

• Build enterprise security control strategies, setting a security posture, and leading the implementation; across all stages of prevention, detection, and response.
• Apply a software-development based approach with automation as a core part of our enterprise security controls.
• Perform threat models, implementation reviews, and security testing; review requirements and designs.
• Embed yourself into technology and business teams, acting as a "security player-coach".
• Monitor and analyze production security events and, as needed, provide in-depth incident analysis.
• Build relationships with other engineers, product managers, data engineers, operators, and business team members.
• Empathize as you reduce risk while focusing on a great employee and user experience.

Qualifications:

• Multiple years of experience in technology / cyber security.
• An ability to identify and provide a basic assessment of security threats.
• An understanding of security problems, paired with an ability to suggest solutions to technology design problems.
• Ability to automate tasks using software or scripting in combination with other technologies (ex: Lambda/GCP Functions/Azure Functions).
• Cloud and SaaS experience.
• Ability to mentor others on technical topics, including security.

Desirable:

• Past experience with pushing technical initiatives; team, project, or indirect management of technology.
• Past experience as a software engineer and secure product development.
• Understanding of the interplay of compliance programs (SOC2, ISO27001) with enterprise security, and aligning them to a common goal.