Senior Security Engineer

Senior Security Engineer
Department: Engineering
Employment Type: Full Time
Location: Cambridge, MA
Description
The DevSecOps team is responsible for building, managing, and expanding on tools that enable software releases in multi-public cloud (AWS, GCP, etc.) environments.
What You'll Be Doing:
As a Senior Security Engineer, you will be partnering closely with software development teams and be responsible for developing and monitoring security alerts, developing security best practices, and consulting with technical and data privacy leaders to determine whether there are security concerns in architectural approaches chosen for a project. You will suggest options and opportunities for improving the security of the chosen architectures.
What We're Looking for in You:
Required:

• A minimum 5 years of experience in a software security-centric role
• Experience in defining and implementing Infrastructure/application security policies in a HIPAA or SOC2 environment
• Hands-on experience in any Scripting language (Bash, Python, etc.)
• Experience in building multi-tier high availability applications with modern web
• technologies
• Knowledge and hands-on experience of common patterns, antipatterns, and best practices to design and architect cloud-based solutions in AWS (primary cloud), GCP, and/or Azure
• Cloud migration, native and hybrid Cloud Solutions, best practices, and recommendations
• Hands-on experience with serverless and/or containerized deployment and orchestration platforms like Kubernetes
• Extensive experience with Infrastructure as Code to deliver programmable infrastructure & environments (Terraform, CF)
• Strong experience in AWS Cloud Services such as VPC, EC2, Lambda,
• CloudFormation, S3, RDS, ECS, SQS, Batch, Step Functions etc.
• Knowledge of professional software engineering practices & best practices for the full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations.

Preferred:

• A minimum 3 years of experience in healthcare DevSecOps with experience in designing or maintaining healthcare systems to keep data secure
• Experience with Okta Directory Service
• Certification or Masters Degree in Cybersecurity for Cloud-based Systems

Benefits

• Vision/Dental/Medical Insurance
• Life/Disability Insurance
• Maternity/Paternity Leave
• Stock Options
• Flexible Work Hours
• Unlimited Paid Time Off
• Fun Workspace! (Standing Desks, Balance Boards, Ping Pong Table, Pick your own workstation set-ups!)
• Free Snacks and Drinks (Jura Espresso Maker + Snacks upon requests!)
• Free lunch on Fridays