Senior Security Engineer

About the role

As a Senior Security Engineer at Bamboohr, you will play a pivotal role in safeguarding our digital assets and infrastructure. Your expertise will be crucial in identifying vulnerabilities, implementing security measures, and ensuring compliance with industry standards. This position offers a unique opportunity to work in a dynamic environment where innovation meets security, allowing you to contribute to the future of cryptocurrency. You will collaborate with cross-functional teams to enhance our security posture and protect our users' interests.

Key facts

What you'll do

• Conduct thorough security assessments of our systems, applications, and networks to identify potential vulnerabilities and threats.
• Develop and implement robust security policies, procedures, and protocols to ensure the integrity and confidentiality of sensitive data.
• Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC).
• Monitor security alerts and incidents, responding promptly to mitigate risks and resolve issues.
• Perform penetration testing and vulnerability assessments to proactively identify weaknesses in our infrastructure.
• Stay updated on the latest security trends, threats, and technologies to continuously improve our security measures.
• Conduct security training and awareness programs for employees to foster a culture of security within the organization.
• Work closely with compliance teams to ensure adherence to relevant regulations and standards, such as GDPR and PCI-DSS.
• Participate in incident response planning and execution, ensuring that the organization is prepared for potential security breaches.
• Collaborate with external security partners and vendors to enhance our security capabilities and share best practices.
• Document security incidents and responses, providing detailed reports for analysis and future reference.
• Engage in continuous improvement initiatives to refine our security processes and tools.

Requirements

• A minimum of 5 years of experience in information security or a related field, with a focus on security engineering.
• Strong understanding of security frameworks and standards, such as NIST, ISO 27001, and CIS controls.
• Proficiency in security tools and technologies, including firewalls, intrusion detection systems, and SIEM solutions.
• Experience with cloud security, particularly in environments such as AWS, Azure, or Google Cloud Platform.
• Solid knowledge of networking protocols and security, including TCP/IP, VPNs, and encryption technologies.
• Familiarity with programming languages such as Python, Java, or C++ for scripting and automation tasks.
• Proven experience in conducting risk assessments and developing mitigation strategies.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication skills, both written and verbal, to effectively convey security concepts to technical and non-technical stakeholders.

Nice to have

• Relevant security certifications, such as CISSP, CISM, CEH, or OSCP, are highly desirable.
• Experience with threat modeling and security architecture design.
• Familiarity with DevSecOps practices and tools to integrate security into the CI/CD pipeline.
• Knowledge of blockchain technology and its security implications.
• Previous experience in a startup or fast-paced environment is a plus.

Skills & tools

• Security Information and Event Management (SIEM) tools
• Intrusion Detection and Prevention Systems (IDPS)
• Vulnerability scanning and management tools
• Endpoint protection solutions
• Cloud security tools and services
• Penetration testing frameworks and methodologies
• Programming and scripting languages (Python, Bash, etc.)
• Network security protocols and technologies

Practical notes

• This is a contract position with flexible working hours, allowing you to manage your schedule effectively.
• The exact salary for this role is competitive and commensurate with experience.
• As this is a remote position, candidates from various locations are encouraged to apply.
• Visa sponsorship is not available for this role, so applicants must have the legal right to work in their respective countries.
• Interested candidates can apply through the provided link to submit their applications and resumes.

By joining Bamboohr as a Senior Security Engineer, you will be at the forefront of securing the future of cryptocurrency. Your contributions will directly impact the safety and trust of our users, making this an exciting opportunity for those passionate about security and technology.