Senior Security Engineer

Expectations and Responsibilities:

• Develop and automate security tools to enable easy integration of security into core workflows
• Partner with DevOps, IT, Infra, and Software engineers to build security best practices into their tools and processes, so it’s easier to build features and infrastructure that meet those standards
• Define and evangelize security policies across Wealthfront, and be comfortable presenting information and educating their colleagues on security practices and changes in a positive, engaging way
• Stay abreast of the latest security threats and mitigations and advocate for solutions that enable us to stay ahead of the curve
• Assess and troubleshoot security threats as they arise, and develop tools to prevent recurrence
• Manage security incident response and write security response playbooks

What We're Looking For:

• 3+ years in a role focused on security engineering and automation.
• 6+ years in a Software, Site Reliability, or Security Engineering role working on online systems.
• Coding ability in Go, Python, Java, or similar.
• Experience building/using tools that implement security/audit automation.
• Comfortable coordinating the response to security events, such as responding to CVEs and reported findings
• Comfortable detailing risks and risk mitigation strategy to leadership outside of security and defending their perspective. Can explain that some risks can be assumed, and can calibrate recommendations and priorities accordingly
• Experience enforcing internal enterprise, infrastructure, and application security policies
• Solid understanding of AWS IAM, CloudTrail auditing tools, Control Tower, and cross/multi-account policy enforcement and anomaly detection tools