Senior Corporate Security Engineer - Distributed US, Canada

Cockroach Labs is the team behind CockroachDB, an open source, distributed SQL database. In addition to the open source version of the DB we are proud to offer our self-service, fully managed cloud offerings of CockroachDB with Dedicated and Serverless options. We aim to build infrastructure that keeps pace with the world, so developers can focus on what matters most: building the best products. Join us on our mission to enable every developer to build world-changing applications. 

Cockroach Labs is looking for a passionate individual to join our Corporate Engineering team to focus on our security efforts. This is a hands-on and multi-functional role where you’ll be working with different teams across the company on a variety of projects related to security.

This role is focused on company-facing security work, focusing on internal infrastructure security, infrastructure, and compliance teams.

In this role, you’ll also have an opportunity to make a significant impact by helping establish the culture and practices for security engineering at Cockroach Labs.

• Work with our IT team to monitor and respond to security alerts from our endpoint security system (Crowdstrike) and MDM systems
• Monitor fleet security patching and vulnerability management
• Work with our infrastructure teams to manage GCP and AWS environments for engineering and other departments
• Help manage company & secure identity systems (Okta, Google SSO)
• Triage, and provide incident response for internal security events
• Create policy, workflows, and best practices for the Corporate Engineering Team
• Work with the compliance team to conduct third party SaaS security reviews and support other compliance initiatives such as SOC 2 and GDPR
• Build internal security culture by leading internal security awareness and training program
• Spearhead Corporate Security initiatives, plan projects and track their progress

• 5+ years of experience in a Security Operations/IT security position
• 2+ years of hands-on experience with AWS or GCP
• An understanding of networking concepts, application security, authentication & authorization and cloud security best practices

In your first 30 days, you will become an integrated member of our Corporate Engineering Team. You’ll become familiar with our identity management, fleet management, and endpoint security system. We believe that it's essential for you to take this first month to become familiar with our technology, processes and our company.

In your second month, you’ll begin to audit our infrastructure and policies. You will offer to make improvements, streamlining pain points and hardening our security posture.

In your third month, you’ll be leading processes to monitor and respond to security events from our security monitoring systems, and will take ownership of reporting and following up on these. You will review third party app integrations ensuring all Roachers can connect their tools safely to our systems.

In addition to your reporting director, you will get to work closely with the senior leadership.

Reporting to Richard Dachtera - Manager Corporate Engineering

Richard is the founding member of the Corporate Engineering team at Cockroach Labs. Over the last two and a half years he’s owned every aspect of the organization. He helped bring the company to SOC2 compliance, supported the company during the COVID transition and opened three offices for the company. Before Cockroach Labs he spent five years at Dropbox as their founding Corporate Engineer hire in New York and then Seattle. Outside of work he’s an avid photographer, with rolls of film easily found in his coat pockets. Also Richard is the unofficial photographer for the company, volunteering his time to take headshots for all employees.

Isaac Wong - VP of Engineering

Isaac is responsible for the health of the engineering organization at Cockroach Labs. He partners closely with teams to ensure we have a balanced culture that promotes quality and innovation in pursuit of our goals. Before joining Cockroach Labs Isaac was in life sciences for 16 years with Medidata Solutions where he had a front row seat on the exciting ride from a 30 person startup to more than 2000 people worldwide. But the lure of distributed, resilient, and consistent SQL databases, along with the amazing technology and culture at Cockroach Labs proved too much. When not working he likes to draw, play the piano, and search NYC for cannoli's with his wife and kids.

• Competitive health insurance coverage (for you and your dependents!)
• Paid parental leave (with baby bucks)
• Flex Fridays
• Flexible time off & flexible hours
• Education reimbursement
• Relocation support or home office support if you’re remote

Cockroach Labs is proud to be an Equal Opportunity Employer building a diverse and inclusive workforce. If you need additional accommodations to feel comfortable during your interview process, please email us at [email protected].

The annual anticipated base salary range for U.S. candidates for this role is USD $120,000 to $180,000, plus commission if a sales role. We set standard ranges for all U.S.-based roles based on function, level, and geographic location, benchmarked against similar stage growth companies. In order to be compliant with local legislation, as well as to provide greater transparency to candidates, we share salary ranges on all job postings regardless of desired hiring location.  Actual salaries may vary and fall outside of this range depending on factors such as a candidate’s qualifications, geographic location, skills, experience, and competencies. In addition, we are often open to a wide variety of profiles, and recognize that the person we hire may be less experienced (or more senior) than this job description as posted. Salary is one component of the Cockroach Labs’ total rewards package, which includes stock options, health insurance, life and disability insurance, funds towards professional development resources, unlimited PTO, paid holidays, and parental leave, to name a few! Salaries for candidates outside the U.S. will vary based on local compensation structures.