Staff Security Engineer, JumpCloud

• 7-10 years of experience in the field of security engineering with an extensive background and experience in software development and architecture
• Substantial production experience with AWS or GCP that includes expertise in networking, securing workloads, and IAM management
• Proficient in writing Golang – almost all of the Security team’s tooling is written in Go, with some miscellaneous scripts in Python
• Extensive experience in Terraform (HCL) and Kubernetes, including containerization technologies
• Proficiency with CI/CD tools, particularly GitHub Actions (Spacelift for IaC is a bonus)
• Exceptional written and oral communication skills, with the ability to convey complex security concepts
• Proven ability to lead cross functional projects and teams
• You are also an expert in one of the following areas:
• Product Security (ProdSec)
• Including threat modeling and secure architecture design/review
• Authentication protocols (SAML, OAuth, LDAP, etc.)
• Mobile application security (iOS and Android)
• Visionary leadership with a focus on innovation in security
• Results oriented, self driven, and able to work independently with minimal supervision
• High level of integrity with a commitment to accountability
• Excellent communication skills, capable of articulating complex ideas clearly
• Creative problem-solving abilities with a passion for security
• Available for on-call (after hours) duties for any internal tools/services the DevSecOps team owns
• Willing to support the Security Operations team during incidents in performing ad-hoc queries, forensics, etc

Desirable

• JumpCloud is looking for a Staff Security Engineer on the DevSecOps team focusing on building and maintaining infrastructure, software, and automation to monitor and mitigate attacks and vulnerabilities across JumpCloud products and services
• You will help lead a team responsible for ensuring JumpCloud products' integrity and keeping JumpCloud users safe
• As a Staff Security Engineer specializing in DevSecOps, you will be responsible for designing and developing software solutions for protecting data and infrastructure deployed into the cloud
• You will collaborate with SecOps, GRC, and other security functions, gaining exposure to a broad range of security domains
• In addition, you will work with various engineering partners across the organization
• Lead the design and maintenance of infrastructure, including custom software and vendor integrations, to meet advanced security needs for Product and Infrastructure Security
• Develop and implement policy enforcement automation and comprehensive reporting systems
• Set up data ingestion, as needed, for the SIEM or other tooling
• Collaborate with DevOps and Developer Enablement teams around the globe to embed security best practices and establish guardrails for developers
• Conduct and oversee threat model reviews of product features and architectures, providing strategic guidance
• Mentor and guide service/feature teams in secure software design principles