Platform Security Engineer, LogicGate
$125-150k
+ Variable compensation + Equity
Cloud-based platform for governance, risk & compliance
Job no longer available
Cloud-based platform for governance, risk & compliance
201-500 employees
Job no longer available
$125-150k
+ Variable compensation + Equity
201-500 employees
Company mission
To empower organizations and businesses to innovate and create a better world.
Role
Who you are
- 4-7 Years of Relevant Experience
- Prior roles in security engineering, DevOps, IT, or software development. We are also open to non-security professionals interested in transitioning into a dedicated security role
- Hands-on experience with AWS (or other cloud providers), including provisioning, configuration, and administrative skills
- Familiarity with Infrastructure-as-Code tools (e.g., Terraform, AWS CloudFormation, Ansible) and best practices for secure deployments
- Knowledge of containerization (Docker) and container orchestration (Kubernetes) security, focusing on identifying and applying best practices for secure image creation and cluster configuration
- Background with cloud IAM services, including managing roles, permissions, policies, and secure access practices
- Understanding of CI/CD pipelines, common toolchains (GitLab CI, Jenkins, CircleCI, etc.), and methods to embed security checks
- Ability to write and troubleshoot scripts or automation to streamline security processes
- Awareness of security threats, controls, and frameworks (e.g., OWASP, CIS Benchmarks, NIST) and how they apply to cloud and application environments, along with familiarity in participating in SOC2 and ISO27001 auditing
- Experience or willingness to get hands-on with application security, bug bounties, or red-team engagements, as well as other aspects of the security program including endpoint security, security awareness, and go-to-market activities, a plus
- Strong interpersonal and communication skills, able to translate complex security issues to non-technical stakeholders
- Passion for sharing research, writing documentation, and presenting learnings to the technical community
- Willingness to participate in an on-call schedule for escalated alerts in partnership with our managed security service provider
What the job involves
- We are seeking a Platform Security Engineer to join our Information Security team and help evolve our security program to the next level
- This individual will primarily focus on platform and cloud security initiatives—particularly within AWS—while also having the flexibility to rotate through other security domains according to interest, skills, and organizational needs
- You’ll work closely with Engineering, DevOps, and our managed security service provider to secure our infrastructure, CI/CD pipelines, and platform architecture
- You’ll report directly to our Sr Manager of Information Security, joining a small but mighty InfoSec team
- Collaborate with Engineering and DevOps to design and maintain secure AWS (or other cloud service provider) architectures
- Identify potential cloud configuration and infrastructure vulnerabilities, implement changes via Infrastructure-as-Code (IaC) merge requests, and ensure compliance with industry best practices
- Lead vulnerability and configuration management for cloud resources, continuously improving security standards and compliance automation
- Collaborate with developers and DevOps to ensure secure designs, threat modeling, and best practices across the stack
- Secure our self-hosted and/or managed CI/CD toolchains, applying best practices for secrets management, code integrity checks, and artifact security
- Integrate automated security testing and scanning tools into the pipeline to identify and remediate vulnerabilities early
- Track and communicate cloud security posture, highlighting progress on remediations, threat mitigation, and overall compliance posture
- Participate in on-call escalation for high-severity alerts (supported by a managed service provider for Level 1 triage)
- Rotate through different InfoSec areas (e.g., incident response, policy and governance, enterprise security) as needed or based on interest
- Champion modern security practices across teams, providing training, documentation, and mentorship
Our take
LogicGate provides SaaS-based risk and compliance solutions to help companies track and automate changing, disorganized governance, risk, and compliance (GRC) processes. Its Risk Cloud and Risk Cloud Exchange platform prioritizes flexibility and ease of use, leveraging no-code capabilities to help companies efficiently optimize their risk-management process.
A Deloitte report suggests that a vast majority of companies are aware of the need to improve their GRC practices and of the benefits that tech integrations could bring in addressing this vulnerability. GRC software like LogicGate could stand to win big as companies invest in keeping up to code - certainly, LogicGate has won significant investment to date, and has won a leading position in the GMC software market.
Indeed, businesses now recognize the importance of a robust and flexible risk-management strategy, hence LogicGate is addressing an urgent and growing demand. With the GRC software market growing impressively, the company looks set to enjoy sustained and strong growth as it remains a recognised player in the space.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 7 rounds)
Jul 2021
$113m
SERIES C
Dec 2020
$8.8m
LATE VC
Total funding: $156.6m
Company benefits
- 47 days off starting your first year, including paid volunteer time
- 12 weeks parental leave
- $1,000 annual educational stipend
- Ongoing learning and development
- Stock options and annual performance bonus opportunities
Company HQ
River North, Chicago, IL
Leadership
Matt Kunkel
(CEO & Co-Founder)Having studied at Indiana University, they spent 6 years at FTI Consulting, before working from 2011 to 2015 as a Director of Navigant Consulting. They left in July 2015 to co-found LogicGate as CEO.
Dan Campbell
(Product and Engineering, Co-Founder)They started their career as a Web Application Engineer at the University of Michigan before joining Navigant as a Senior Consultant. In June 2015 they co-founded LogicGate with Matt.
Jon Siegler
(CPO & Co-Founder)They worked as an Accenture Analyst for over a year before joining KMR Group, where they worked as a Senior Analyst for over 3 years. they spent almost 4 years as a Navigant Associate Director before co-founding LogicGate.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 12 more jobs at LogicGate