Security Compliance Engineer/ Security Engineer

About the Role: 

Motive is looking for a passionate Product Security Engineer to join our Security Architecture & Engineering team. The team is responsible for the security and privacy of all products and services offered by the company.

We are looking for people who want to partner with our peers to level up Motive's security posture and reduce security risks stemming from products developed by Motive and the underlying platform. We are passionate about helping teams with security design and implementation, creating policies to guide our peers, and identifying and prioritizing Motive’s security and privacy risks. Does that sound like you, or like someone you want to be? Cool. We would like for you to apply.

As a Software Security Engineer on the Security Architecture & Engineering Team, you will partner with Motive teams to protect Motive’s data, implement important security controls, and evaluate and remediate security risks. You'll help us launch our Secure Solutions Development Service. We do not expect you to be an expert in all of the team's responsibilities but we do expect you to be familiar with several of the team's responsibility areas, or well-versed in one of them and interested in the other areas.

What You’ll Do: 

• Develop design patterns, repeatable guidance, and where necessary, policy
• Recognize and adopt best practices in security engineering fields throughout the organization
• Consult with both product-focused and horizontal teams, both engineering and not
• Help teams make the right security calls
• Perform architecture and data handling reviews
• Perform risk assessments and risk exceptions
• Develop and maintain security tooling such as SAST, DAST, OSS Scanners, IAM, Secrets Management etc
• Support and manage product security process activities including threat and attack tree modelling, security requirements definition with the research team, and develop cyber test planning and penetration testing.

What We’re Looking For: 

• Have 3+ years of experience with identifying and remediating OWASP Top 10 and other AppSec-related issues
• Have 3+ years of experience in working with product teams creating security designs and providing security requirements
• Have 3+ years of hands-on development experience in the programming languages from Python, go, and javascript
• Have an understanding of cloud computing architectures and services; especially AWS
• Have 1+ years of experience working with Docker and Kubernetes-based environments
• Strong collaboration skills working cross-functionally with internal and external customers