Security Software Engineer, Thread AI

• 5+ years of experience with security engineering, computer and network security and security protocols
• 5+ years of software engineering experience in at least one programming language such as Java, Go or Python
• 5+ years of experience with detection and response, security monitoring or infrastructure security assessments
• Experience with security frameworks and libraries, such as Spring Security
• Experience with information security fundamentals and core technologies (e.g., authentication, encryption, firewalls, vulnerability scanning, SIEM/SOAR, audit logs)
• Experience with public cloud service providers (e.g. GCP, AWS, Azure)
• Experience with identity and access management frameworks and protocols, including SAML, OAUTH, and SCIM
• Experience with e-mail security protocols (e.g. SPF, DKIM, DMARC) and controls
• Knowledge of modern adversary tactics, techniques, and procedures
• Experience deploying and managing endpoint security solutions (e.g. management frameworks, EDR tools)

Desirable

• Thread AI is focused on building an AI-native workflow orchestration engine looking for dedicated individuals to join its growing team
• Our goal is to make infrastructure simple for enterprises and public sector agencies seeking to get the most from AI
• Headquartered in New York, our growing team is a group of AI, product, and engineering experts, who have a track record of creating and executing against complex workflows and infrastructure
• We're a small and committed technical team that oversees engineering, research, design, product, and operations
• We believe that a small dedicated team with a flat structure and collaborative culture can move faster and build better products than large hierarchical organizations
• We are looking for a skilled software engineer who will be responsible for implementing and managing the security of our internal information systems’ infrastructure and processes
• You will work closely and collaboratively with other senior engineers to develop security capabilities and measures, enforce security policies, and monitor internal systems for security threats