Cloud Security Engineer

We are Domosapiens- uniquely skilled, passionate data lovers anchored in a culture of connectivity. We are transforming the way business is managed by putting real-time data into the hands of every decision maker across organizations. Diversity is valued here because homogenized teams create echo chambers; and nobody benefits from that. The insight garnered from diverse backgrounds, perspectives and lived experiences results in pioneering innovations across the organization and better experiences for our customers. The more diverse our talent, the more impactful the Domosphere becomes. 

Position Summary

As a member of the Cloud Security team, you will collaborate with other security and operations teams to execute on strategic plans and develop tactical execution methodologies which improve the “protect, detect, and respond” capabilities of security risk mitigation. Seeking someone with expertise in cloud and is motivated to provide guidance in the Domo cloud environment in collaboration with the security team and other operational and engineering teams.

This role is responsible for helping secure Domo's systems, network infrastructure, endpoints, services, and data. The security engineer will be considered a subject matter expert and will play a key role in creating the cloud security roadmap. This role will also evaluate and help drive improvements to the information security program.

Key Responsibilities

• Manage and lead security engineering projects and initiatives;
• Coordinate with CloudOps, DevOps and DevEng teams to support the incorporation of security risk mitigation into application and cloud systems deployment;
• Create and maintain a defense in depth security model in the key areas of business;
• Build, design, develop, deploy, and support security software/tools that deliver security functionality and improve security efficiency and capabilities;
• Familiarity with cloud deployment orchestration, automation, and security configuration management;
• Create requirement and design documents that account for security risks in new or existing systems with architectures to mitigate them within risk appetite;
• Ensure enterprise security on AWS and Azure platforms;
• Develop automation and utilize frameworks to scale both protection and mitigation tools;
• Evaluate the effectiveness of existing security controls;
• Create requirement and design documents that account for security risks in new or existing systems with architectures to mitigate them within risk appetite;
• Develop automation and utilize frameworks to scale both protection and mitigation tools;
• Iterate security posture to better protect against attacks;
• Monitor, support, evaluate existing security controls and make recommendations to enhance security;
• Assist with security awareness initiatives;
• Will not manage people but will lead projects.

Job Requirements

• BS degree, or industry equivalent experience;
• 7+ years in a hands-on security role with a strong background in security architecture;
• Demonstrate teamwork skills and resourcefulness;
• Strong experience of cloud, and containerization;
• Strong knowledge of enhancing security on AWS and Azure;
• Familiarity with CloudFormation/Terraform;
• Experience with Security Information and Event Management (SIEM) tools (Splunk);
• Experience with vulnerability scanners;
• Familiarity with security testing and forensics tools including coordination of vendor pen testing;
• Strong understanding of the OSI model and TCP/IP protocols;
• Strong knowledge of Unix/Linux operating systems;
• Knowledge of OWASP security model and Web application security;
• Batch Programming and Scripting skills;
• Strong analytical and problem-solving skills.

Domo is an equal opportunity employer.