Senior Security Engineer, Oyster
More information about location
HR platform for globally distributed companies
Job no longer available
HR platform for globally distributed companies
501-1000 employees
Job no longer available
More information about location
501-1000 employees
Company mission
To create a more equal world by making it possible for companies everywhere to hire people anywhere.
Role
Who you are
- 5+ years of experience in application security, with a strong focus on SaaS environments
- Strong knowledge of security assessments, audits, and best practices for SaaS applications
- Experience in configuring and managing security controls and access management within a SaaS-centric environment
- Proficiency in using security testing tools such as SAST, DAST, and SCA
- Experience integrating security tools into CI/CD pipelines and automating security processes
- Familiarity with data protection regulations (e.g., GDPR, CCPA) and their implications for application security
- Understanding of identity and access management
- Strong problem-solving skills and the ability to communicate complex security concepts to technical and non-technical audiences
- A drive to learn, and help the development team to progress
- Fluent English language skills
- A reliable internet connection (or be able to get one)
What the job involves
- We are looking for a high-performing Senior Security Engineer to join the Engineering Team at Oyster
- In this role, you will work closely with the Data Protection/Privacy Team, IT Team, and Product Development Team to ensure that our applications are secure throughout the development lifecycle
- You will be responsible for identifying and mitigating security risks, implementing best practices, and collaborating with cross-functional teams to enhance our security posture
- Working in a fully distributed company, you will work synchronously and asynchronously with team members all over the world
- We are looking for someone with strong technical skills, a collaborative mindset, and the ability to thrive in a dynamic, fast-paced environment
- Collaborate with development teams to integrate security practices into the Software Development Lifecycle (SDLC)
- Conduct security assessments, code reviews, and threat modeling exercises to identify and mitigate security risks
- Provide guidance on secure coding practices and remediation strategies
- Conduct security assessments and audits of both in-house and third-party SaaS applications
- Ensure proper security controls and access management are implemented for SaaS tools
- Stay updated on emerging threats and vulnerabilities specific to SaaS environments and address potential risks proactively
- Implement and manage security tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA)
- Integrate security tools into CI/CD pipelines for continuous security testing
- Monitor and analyze security tools' outputs to identify and address potential security risks
- Work with the Data Protection/Privacy Team to ensure applications comply with relevant data protection regulations (e.g., GDPR, CCPA)
- Collaborate with the IT Team to ensure secure infrastructure configurations for hosting and deploying applications
- Partner with the Product Team to incorporate security requirements into product features from the design phase
- Develop and deliver security training and awareness programs for developers and relevant stakeholders
- Promote a culture of security awareness and best practices throughout the organization
Our take
A global economy demands a global workforce, but up until recently, it has been incredibly difficult for employers to hire global talent. Frustrated by costs and legal uncertainty surrounding employing individuals in other countries, many global businesses have had their talent pool dictated by the location of their offices. Oyster wants to change this.
Oyster has built a platform which gives businesses everything they need to employ and manage a globally distributed team. Covering everything from international payroll to distributing employee benefits, Oyster's software platform is created to solve the complexities of giving full-time, full-fledged employment to anyone in the world. This benefits employers, who can access the best talent regardless of location, but also employees, who can access a worldwide jobs market and find the best outlet for their abilities.
Oyster is not the first global HR-services provider in this space, and as such it will have to fight hard for market share. That being said, the market for global HR services is still in its infancy, meaning that Oyster has a really good shot at establishing itself as a key player early on. And, with more businesses moving their workforces online permanently, there is good reason to think that the demand for remote global talent could be set for a big surge. If this proves to be the case, and if Oyster can get itself a strong client base early on, it could be set for big things in the future.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 6 rounds)
Nov 2024
$5m
LATE VC
Sep 2024
$59m
SERIES D
Total funding: $288.2m
Company benefits
- 40 days PTO inclusive of regional holidays
- Mental health support via Plumm
- Monthly ThanksBen wellbeing allowance
- Flexible and inclusive parental leave
- Laptop and $1,500 equipment stipend
Company values
- We elevate talent: Great talent can be found worldwide—but it’s been hard to tap into historically. We enable our customers to connect with the global talent pool, which opens up more opportunities for knowledge workers and helps them realize their full potential
- We build trust: Mutual trust is a key ingredient to our success. To build trust with our customers, we maintain an active flow of information and communication, follow through with our commitments, and provide 24/7 support
- We thrive together: Our team is on a shared mission to make global employment accessible to everyone. We’ve intentionally gathered a variety of perspectives and experiences to stimulate innovation and reach this go
Company HQ
SoMa, San Francisco, CA
Articles
Leadership
Tony Jamous
(Co-Founder & CEO)Prior to co-founding Oyster in 2019, Tony was the founder and CEO of Nexmo, the SaaS Communications platform, which was acquired by Vonage in 2016.
Jack Mardack
(Co-Founder)Previously worked in Marketing Leadership across several companies such as Vonage, Chartcube, Prezi & Mingleverse Laboratories Inc.
Share this job
View 7 more jobs at Oyster