Security Engineer, Highnote

• Ideal candidates should have similar experience with early-stage companies
• 3+ years of experience in information security space
• Experience in leading the overall security efforts
• Experience with one or more scripting/programming languages
• Experience with cloud platforms, such as GCP or AWS
• Knowledge of cryptography, PKI, TLS, etc
• Familiarity with static and dynamic code analysis tools
• Experience with APIs
• Ability to work autonomously in a fast-paced and cross-functional environment

Desirable

• We are looking for a Security Engineer to lead the overall security efforts at Highnote
• It is an opportunity to take all your prior security experience and learnings, work with engineering leadership and various teams to improve security, and most importantly, be an evangelist for security across the company
• Refine and execute the overall security strategy
• Drive to and maintain security policies and processes
• Own various compliance programs such as PCI-DSS, SOC1/2, and GDPR
• Own and drive application and web security initiatives, ensuring industry best practices
• Serve as a security consultant in design discussions and reviews
• Drive secure coding and SDLC initiatives
• Manage penetration testing efforts and bug bounty programs
• Evaluate various technologies for improving security defenses and monitoring
• Integrate security controls across cloud-native and third-party tools
• Own infrastructure and vendor security audits
• Work with the infrastructure team on securing GCP, AWS, and On-Premise Colos
• Implementing security best practices across Kubernetes and Istio
• Own security incident response and related systems