DataSecOps Engineer

Array is looking for a DataSecOps Engineer who will proactively secure Array's data architectures from malicious cyber exploitation. You will report to the Director of Information Security/Technology.

You Will:

• Develop a holistic data security architecture framework that is applied to all data sets, regardless of platform.
  • Implement safeguards like data security automation testing & dynamic masking.
• Implement a flexible data tagging scheme that both maximally protects sensitive data while retaining optimal usability across all data sets.
• Manage data access permissions to maintain a tight, risk reduced overall access posture.
• Automate access auditing & alerting across all data sets.
  • Develop alerting around sensitive data access for lead indicator generation.
• Maintain digital integrity & enforcement of data tiers from lowest to highest risk data.
• Test data encryption implementations across the stack and ensure integrity & design.
• Perform custom vulnerability testing of API service calls involving data access routines.
• Identify security seams across data platform integrations.
• Develop & Implement rigid GCP data security controls complete with auditing & alerting.
• Develop a data anomaly detection program that incorporates analytics & alerting to reduce the risk to array's operations.
• Advise array's clients on data security product integrations & implementations.
• Identify new security vulnerabilities in data access implementations.
• Prototype new data technologies for use and recommend/present secure integrations to the ARB.
• Maintain SOC 2 & PCI 4.0 compliance encompassing all array data.
• Neutralize new information security threats targeting the array data architecture by developing proactive countermeasures.
• Evaluate SAST/DAST outputs and fix data security vulnerabilities.

You Have:

• Degree in computer science, computer engineering, IT, systems engineering, or related qualification
• 1+ years of professional software development experience
• 3+ years of strong data security experience.
• Experience securing Google Cloud Platform (GCP) or Amazon Web Services (AWS) environments & developing data hardening policies to prevent against cyber exploitation
• Experience securing deployment orchestration & infrastructure-as-code (IaC) deployments with tools like Pulumi & Terraform and containerization tools like Docker and Kubernetes
• Experience with GitLab secure code features or similar capabilities
• Familiarity with NIST standards, OWASP protocols, CIS benchmarks
• Interest in cybersecurity trends and hacking/exploitation techniques
• Proficient in Python / Node / SQL
• Interest in advancing & enhancing secure code training with your own security finding

Array Offers All Employees the Following Benefits and Perks:

• Full medical, dental, and vision, premiums covered at 100% for employees and 50% for dependents
• Unlimited PTO and sick leave + 14 company holidays to encourage a healthy work-life blend
• In-house wellness concierge and partnership with TalkSpace to support mental health
• 100% 401k match with immediate vesting
• Generous parental leave for all parents
• $2,000 medical travel coverage
• $1,000 desk setup subsidy to set-up your unique remote office
• $100/month to subsidize wifi/cell phone expenses

One of our core values at Array is to care and support one another, and that's why we strive to create an environment where everyone feels empowered to bring their full, authentic selves to work. Diversity, equity, and inclusion foster collaboration, comfort, and confidence. We're at our collective best when we each feel our best.

We are proud to be an equal opportunity workplace, we are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.