5+ years in software engineering with Java, Go or Python
Expertise in detection, response, and infrastructure security assessments
Familiarity with security frameworks like Spring Security
Knowledge of core information security technologies including authentication and encryption
Experience with cloud services like GCP, AWS, Azure
Proficient in identity management frameworks including SAML and OAUTH
End-point security solutions deployment and management experience
Responsibilities
Implement and manage security for internal info systems
Collaborate with senior engineers on security measures
Develop and enforce security policies
Monitor internal systems for security threats
Conduct infrastructure security assessments
Benefits
Diverse and inclusive workplace culture
Encouragement for applicants from all backgrounds
Opportunity to work with AI/ML tools
Full-time role based in New York City
Equity opportunities included
Full Job Description
About The Role
We are looking for a skilled software engineer who will be responsible for implementing and managing the security of our internal information systems' infrastructure and processes. You will work closely and collaboratively with other senior engineers to develop security capabilities and measures, enforce security policies, and monitor internal systems for security threats.
What We're Looking For
5+ years of experience with security engineering, computer and network security and security protocols
5+ years of software engineering experience in at least one programming language such as Java, Go or Python
5+ years of experience with detection and response, security monitoring or infrastructure security assessments
Experience with security frameworks and libraries, such as Spring Security
Experience with information security fundamentals and core technologies (e.g., authentication, encryption, firewalls, vulnerability scanning, SIEM/SOAR, audit logs)
Experience with public cloud service providers (e.g. GCP, AWS, Azure)
Experience with identity and access management frameworks and protocols, including SAML, OAUTH, and SCIM
Experience with e-mail security protocols (e.g. SPF, DKIM, DMARC) and controls
Knowledge of modern adversary tactics, techniques, and procedures
