Corporate Security Engineer, Posit
$120.6-159.2k
Plus an annual profit-sharing bonus
Open source and enterprise ready tools
Posted today
Open source and enterprise ready tools
201-500 employees
Posted today
$120.6-159.2k
Plus an annual profit-sharing bonus
201-500 employees
Company mission
To create free and open-source software for data science, scientific research, and technical communication.
Role
Who you are
- The ideal candidate will have a strong interest in endpoint and SaaS security and a desire to build secure, scalable solutions for a distributed workforce
What the job involves
- We are seeking a motivated and detail-oriented Corporate Security Engineer to help protect Posit's employees and corporate systems
- You'll play an important role in maintaining our security posture, implementing key controls, and ensuring the security of our employee-facing systems and data
- Our department's mission is to ensure the security of Posit's employees, assets, and customer data
- You will collaborate closely with other Corporate Security and Security Operations engineers to achieve our departmental mission
- We achieve this through secure architecture design, threat detection and response, supply chain security, secure development practices, and security operations, enabling innovation with right-sized security controls
- Since its inception, Posit has operated as a 100% distributed company with a SaaS-based infrastructure
- This presents unique challenges and requires pragmatism, creativity, and a collaborative, detail-oriented approach to be successful
- Own
- Set and enforce secure configuration standards for employee workstations across MDM solutions (Jamf, Intune, Kolide)
- Investigate and respond to corporate security incidents, including analysis, remediation, and digital forensics for workstations
- Monitor and optimize the SIEM platform for corporate threat detection
- Lead proactive threat hunting efforts, identifying adversary Tactics, Techniques, and Procedures (TTPs) using frameworks like MITRE ATT&CK across corporate systems
- Conduct targeted security research into emerging threats and defensive strategies
- Conduct regular workstation audits and analysis using CrowdStrike Falcon EDR
- Proactively harden and monitor security configurations of collaboration platforms (Slack, Google Workspace, Zoom)
- Perform external network security scans of corporate assets to identify and resolve vulnerabilities
- Utilize and enhance corporate security incident response playbooks
- Support the vulnerability management program for workstations and corporate systems
- Assist
- Contribute directly to the enhancement of our security awareness and phishing programs
- Support compliance initiatives by providing evidence of security controls for corporate systems
- Help execute the security monitoring strategy across all corporate infrastructure and SaaS platforms
- Aid in the security review and risk management of new vendors and software
- Support security issue management during on-call rotation
- Teach
- Ability to work with IT and Operations for secure system administration, encompassing patching and security assessments
- Guide and enforce security controls for all corporate SaaS platforms (e.g., Salesforce, Netsuite, BambooHR)
- Create and maintain technical documents and standards for corporate security, such as internal blog posts and security advisories
- Learn
- Use AI to improve Corporate Security and ways to protect software development and Posit customers from AI threats
- Data science workflows to report on security operations and security posture
- Experience with or knowledge of endpoint security architecture and services (EDR/XDR, MDM)
- Familiarity with securing SaaS applications and corporate environments
- Familiarity with issue management systems for ticketing and event monitoring
- Experience with security controls with an emphasis on vulnerability management and detection of misconfigurations
- Experience with or willingness to learn a scripting language (e.g., Python) for security automation
- Experience with or willingness to learn GitOps practices for versioning configuration and IaC
- Familiarity with SIEM platforms and security telemetry analysis
- Knowledge of identity and access management principles
- Experience with or knowledge of security incident response procedures
- Excellent written communication for use by other engineers and operators
- Familiarity with security and compliance frameworks (e.g., CIS, NIST CSF, SOC2, ISO 27001)
- Within 1 month, you’ll…
- Complete all HR and IT onboarding processes, security practices, and communication channels
- Familiarize yourself with Posit products, departments, and goals
- Familiarize yourself with Posit's corporate security toolset
- Shadow members of the Corporate Security/Security Operations teams during routine tasks, including incident response investigations and security monitoring, to understand current workflows
- Begin active participation in team meetings and understand the current priorities and ongoing projects within the SecOps team
- Conduct an initial review of the existing secure configuration standards for key collaboration platforms
- Within 3 months, you’ll…
- Independently investigate and respond to low-to-medium complexity corporate security incidents affecting workstations, utilizing established playbooks and performing digital forensics as needed
- Conduct your first external network security scan of designated corporate assets, document vulnerabilities, and present your findings and remediation suggestions to the team
- Actively contribute to the execution of one security awareness campaign, including setup, monitoring, and analysis of results
- Propose and begin implementing at least one specific improvement to the security configuration of a designated collaboration platform (e.g., Slack, Google Workspace, Zoom)
- Take the lead on researching one trending threat or vulnerability, delivering an internal intelligence brief that outlines its relevance to Posit and proposed defensive measures
- Within 6 months, you’ll…
- Gather and provide evidence of security controls for corporate systems for audit requests to support compliance initiatives, based on systems knowledge
- Consistently manage and enforce secure configuration standards for employee workstations across MDM solutions
- Take ownership of monitoring and optimizing a specific segment of the SIEM platform for corporate threat detection, such as alerts related to endpoint or SaaS activity
- Develop and publish at least one piece of technical documentation or an internal blog post on a corporate security topic relevant to Posit employees or IT operations
- Successfully complete at least one on-call rotation for security issue management, effectively handling incoming alerts and issues
- Lead the process from hunt to detection by independently executing threat hunts based on the MITRE ATT&CK framework
- Enhance our threat intelligence capabilities by developing and integrating a new threat feed into our internal collaboration platform, delivering automated, actionable alerts to the security team
- Within 12 months, you’ll…
- Proactively identify and report on key security metrics related to workstation security and vulnerability management from tools like CrowdStrike Falcon EDR
- Elevate the threat hunting program by designing and automating novel hunting methodologies, measurably improving detection coverage, and reducing manual investigation time
- Become a recognized subject matter expert on threat actors relevant to Posit. Translate your research into actionable security controls and team-wide training to directly shape defensive strategy and mentor team members
Our take
In a data-driven world, having reliable and accessible software is key to optimizing functionality. Posit provides R and Python-based tools to help improve the speed and quality of analysis, created "for data scientists by data scientists", with uses in data science, scientific research, and technical communication.
Posit's unique approach to creating universal data processing capabilities is helping to create new pathways in the digital age. It uses a unique blend of social and commercial endeavours to satisfy the demand for comprehensive data processing, and many of the company's products, including Posit Team for enterprises, are open sourced and accessible to all. Those looking for more advanced products can access programs such as Posit Server Pro and Shiny Server Pro for workspace management.
Given its unique approach to data management, entities from Liberty Mutual to Walmart and NASA have been incorporating Posit's technology. The company has received considerable amounts of funding, which has been used to expand its services, in 2024 launching the beta of its next-gen data science development environment. As the demand for open-source services continues to grow, Posit's effort to create data management services for all should continue to capture market share.
Steph
Company Specialist at Welcome to the Jungle
Insights
41% employee growth in 12 months
Company
Funding (1 round)
May 2021
$161.3m
LATE VC
Total funding: $161.3m
Company benefits
- 100% remote (or come in to one of our offices in Seattle or Boston)
- Pick your hardware — we want to equip you with what you need to do your best work
- All our full time employees are given an allowance to outfit their home office
- We have a flexible environment with a “take what you need” vacation policy
- Positive, passionate culture working with a world-class team committed to data science and the R language
Company HQ
South Boston Waterfront, Boston, MA
Leadership
JJ Allaire
(CEO)Founded Allaire, where they served as CEO and then Chairman. JJ also founded Onfolio, which was acquired by Microsoft. They founded FitNow in 2008 before starting RStudio in January 2010.
Share this job
View 7 more jobs at Posit