Security Engineer II

About the role

In this role, you’ll partner with other technology teams to design and implement secure software and practices. You’ll also collaborate with product and other business stakeholders to establish and improve existing security controls.

About the team

The security engineering team is building tooling and processes to automate detection and mitigation of cybersecurity threats. In this role, you’ll partner with other technology teams to design and implement secure software and practices. You’ll also collaborate with product and other business stakeholders to establish and improve existing security controls.

What you get to do every day

You are passionate about building practical solutions to securely deliver code at every stage of the software development lifecycle. You have a deep understanding of software engineering and security fundamentals and want to empower others to understand the importance of security. You have a track record of efficiently delivering projects that elevate the security posture of your organization. You have a strong interest in generative AI tooling and applying their use safely.

• Build practical controls to improve the effectiveness and robustness of our engineering team
• Foster a DevSecOps culture through education, automation, and tooling.
• Secure our SDLC process through automation
• Implement checks in pipeline
• Perform security reviews of application code
• Take part in team on call rotation for security events and monitoring alerts
• Advocate and educate security best practices
• Create tooling and automation to efficiently respond to security events
• Partner with stakeholders to respond and mitigate security threats

What you bring to the role

• Consistent track record of securing application services and cloud infrastructure
• Proficient coding ability in at least one modern programming language. E.g.Typescript/Javascript, Ruby, Java, Python, Golang
• Practical experience securing cloud environments.
• Strong communication skills: you can easily discuss complex technical concepts with both engineers and non-engineers.
• Strong ownership and bias for action: You love to roll up your sleeves. You are proactive, drive projects from start to finish, and lead cross-functional projects, while keeping stakeholders informed.
• Leader and Mentor: You are a recognized leader in your areas of responsibility, and enjoy sharing knowledge and mentoring others.
• Operational Excellence: you raise the bar on the quality of the software and infrastructure that you work on.

Nice to have:

• Ability to secure AI tooling in a regulated environment
• Familiarity with securing Node.js and GraphQL
• Applied knowledge of a threat modeling framework like STRIDE or MITRE