In this role, you will be the primary security team point of contact for several large engineering efforts. You will work with engineering teams throughout their development lifecycle. You will conduct security reviews, post incident reviews, develop threat models, and use the insights from these engagements to build scalable methodologies. You will help define, automate and advocate for application level and platform-wide security improvements with a focus on risks to customer accounts and data. You will play a hands on role in ensuring that programs are reviewed, adjusted, implemented and tested appropriately.
7 or more years conducting security reviews, incident response, threat modeling, or security engineering
Demonstrated ability to design, document, and implement new security processes
Understanding of cloud-native architecture and managed platform service (eg. compute, storage, networking, databases)
Expertise in threat modeling, operational threat intelligence, and common attack vectors and frameworks.
Understanding of applied cryptography, access control, modern authentication frameworks, and other security mechanisms
Experience with enterprise log collection and analysis platforms (e.g., Splunk, OSQuery)
Experience with threat hunting, insider risk and/or investigations
Experience working with data engineers to define metrics and interpret results from detection and risk models
Experience in applying and experimenting with AI/ML, to solve security related use-cases