Security Engineer, ZEBEDEE

• 3+ years of experience in security governance, cloud and application security assessments, risk management, and/or third party risk
• Thorough understanding of cybersecurity principles, cloud security, and identity and access management
• Firm grasp on cloud computing principles
• Demonstrated experience with Infrastructure as Code using Terraform/OpenTofu
• Working knowledge of Linux
• Experience with metrics gathering, alerting, reporting
• Experience with CI/CD pipelines
• Ability to design, implement, and improve cybersecurity solutions
• Ability to balance cybersecurity initiatives with business initiatives
• Ability to identify and analyze potential methods of attack

Desirable

• ZBD is seeking a Security Compliance Engineer to design, implement, and maintain our organization's security compliance framework and risk management programs.
• This role bridges technical security implementation with regulatory compliance and risk assessment.
• You should be comfortable working in a growth-stage startup, with comfort navigating ambiguity and fast-paced environments. Come build, secure, automate, and monitor with the ZBD team!
• Design, implement, and maintain security solutions to address vulnerabilities and risks within ZBD systems
• Work closely with the software engineers and developers to establish and keep a strong security compliance posture
• Develop and enforce technical security standards, patterns, and best practices to establish and maintain a consistent and robust security posture across ZBD systems
• Proactively identify and address security & policy gaps in existing systems and architectures, recommending and implementing enhancements to strengthen ZBD’s overall security posture
• Contribute to the development and maintenance of security documentation, including policies, procedures, and technical guides
• Bring and keep ZBD systems, processes, and procedures into compliance with relevant compliance frameworks (SOC 2, DORA, GDPR, PCI DSS, etc.)
• Develop and maintain cloud recovery and backup solutions to ensure availability and business continuity
• Participate in an On-Call rotation
• Document processes & procedures