Senior Security & Compliance Engineer

What the job involves

The Senior Security & Compliance Engineer will oversee the security of our production and corporate systems. The ideal candidate will manage security alerts, implement policies, ensure compliance with various regulatory standards, and coordinate security requirements with external customers. This role requires a strong technical background in cloud security, policy development, and vendor management.

Responsibilities

• Own all aspects of security management for our production Cloud infrastructure (AWS, GCP, and Azure) and physical field devices (Linux).
• Respond to security alerts and advisories, and define and set up alerts for security events.
• Manage security and compliance tools such as AWS Cloud Trail, CloudWatch, Drata, Chronicle, Cyderes, Horizon3 AI.
• Maintain and enhance vendor relationships to ensure optimal utilization of security tools and services.
• Define and implement security policies and controls for internal corporate applications, including Google Workspace, GitHub, Jira.
• Audit corporate and production security guidelines and policies.
• Drive SOC2, NIST, GDPR, CCPA/CPRA and FedRAMP security prioritization, compliance, and audit processes.
• Develop and execute a comprehensive security roadmap.
• Conduct information security reviews with management and auditors.
• Coordinate mitigation actions across different teams for a cohesive response to security incidents.
• Liaise with major external customers to coordinate security requirements, translating them into technical requirements. As part of a wider engineering team, lead the Implementation of these requirements.

Qualifications

• Experience with one of the core (Golang, Python) programming languages, scripting and automation.
• Proven experience in cloud security management (AWS, Azure, GCP).
• Familiarity with security policies and controls for internal corporate applications (Google Workspace, GitHub, Jira).
• Experience with compliance frameworks such as SOC2, NIST, GDPR, and FedRAMP.
• Strong skills in managing security tools and vendor relationships.
• Excellent ability to develop and implement security policies and guidelines.
• Relevant certifications in security and cloud platforms are highly desirable.

Target Salary Range

• $150,000 - $180,000
• Company granted equity 
• Company wide bonus program