Senior Cloud & Application Security Engineer, Valon Mortgage
$170-200k
+ Equity and performance bonus program, This Base Compensation pay range applies to our New York City located staff and may differ according to location.
Transforming $25B+ mortgage servicing market with software
Open for applications
Transforming $25B+ mortgage servicing market with software
201-500 employees
Open for applications
$170-200k
+ Equity and performance bonus program, This Base Compensation pay range applies to our New York City located staff and may differ according to location.
201-500 employees
Company mission
To champion homeowners on their financial journey, as the partner they trust with their home and future.
Role
Who you are
- This position requires a deep understanding of security technologies, cloud platform and application security, secure SDLC practices, security risk and controls, and the ability to collaborate with cross-functional teams to ensure we protect our most critical assets to uphold trust with our customers and stakeholders
- Proven experience in a security engineer or related role, with a focus on cloud platform and infrastructure security, application/product security, detection and response, and/or vulnerability management
- In-depth knowledge and implementation of platform and application security technologies, including CSPM, CIEM, CDR, DSPM, SAST/DAST, SCA and/or related vulnerability and security management tools
- Strong understanding of application development, code reviews, networking protocols, configuration management, infrastructure security or related domains
- Experience with cloud security and environments (strong GCP experience is preferred)
- Ability to work autonomously and navigate complex efforts including driving multiple projects
- Ability to foster strong relationships and partner with stakeholders to drive results
- Excellent communication and collaboration skills, with the ability to explain complex security concepts to technical and non-technical stakeholders
- Knowledge of security and compliance frameworks and requirements (OWASP, SOC 2, NIST, ISO, CIS, etc.)
- Experience or exposure to startup environments is a plus
- Minimum of 5 years as a technical security engineer with relevant responsibilities and background
- Bachelor's degree in Computer Science, Information Security, Technology, or a related field
- Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP). Google Cloud Security Engineer or related certificates are a plus
- Strong knowledge of cloud environments
- Experience with security technologies (specifically cloud platform and application security tools above)
What the job involves
- We are seeking an experienced and skilled Senior Security Engineer (Cloud Platform and Application Security) to join our growing team! As a key security member at Valon, you will play a critical role in ensuring the security of our organization's systems, cloud infrastructure, products and data.
- Cloud Security Design and Implementation: Develop and implement security architectures for cloud platforms (e.g., Google Cloud, AWS) that ensure the confidentiality, integrity, and availability of our cloud resources
- Application Security: Conduct security assessments, support code reviews, and vulnerability scanning to identify and mitigate risks in applications. Collaborate with engineering teams to integrate DevSecOps practices into the Software Development Life Cycle (SDLC)
- Conduct in-depth analysis of security events, incidents, and vulnerabilities to identify root causes and recommend corrective actions
- Manage and optimize security tools such as CSPM, CIEM, CDR, DSPM, SAST/DAST, SCA and/or related technologies
- Assist in vulnerability assessments and penetration testing activities including remediating security issues
- Collaborate with other teams to ensure the effective integration of security controls across the organization including infrastructure and applications
- Develop, implement, and enforce security policies, standards, and procedures
- Maintain accurate and up-to-date documentation of security processes, procedures, and configurations
- Develop security metrics and reporting for management review
- Support operational activities including security advisory and design, vendor security reviews, issue remediation, security awareness and training, and other processes
- Support audit and compliance activities for various security domains
Our take
Valon is attempting to bring smoother, clearer customer service to the often unsophisticated industry of mortgage services. Its cloud-native mobile platform allows borrowers to make payments and manage escrow accounts while avoiding time-consuming call centers, inaccurate information and poorly designed websites. In turn, lenders can use the platform to request API feeds to gather information on customer performance.
The company is aiming to disrupt and bring down the costs in a market that it sees as heavily monopolized, and which is largely devoid of customer-oriented innovation. Currently, mortgage servicing giant Black Knight controls over half of all residential loans in the US, the result of which has seen a 250% increase in servicing costs in the last decade.
Valon's growth so far has been remarkable. The company went from zero contracts in 2019 to $10 billion in mortgages in 2020. Its remarkable growth attracted over $70 million in funding in 2021. On top of this boost, it has further diversified its capabilities to include servicing government-sponsored home loans from the Federal National Mortgage Association.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
21% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
Jul 2024
$69.8m
LATE VC
Aug 2022
$61.5m
LATE VC
Total funding: $248.8m
Company benefits
- Fully Covered Healthcare Premiums on Zero Deductible Medical/Dental/Vision Insurance Plans
- Flexible Sick Days
- Equity Packages
- Generous Vacation Policy + Multiple Company Holidays
- Provided Laptop, Custom Acessories, and Ergonomic Equipment
- Commuter Benefits
- Paid Parental Leave
- Unlimited Snacks and Drinks
Company values
- Do what’s best for Valon - We always do what’s best for the business. We prioritize Valon’s long-term success over personal or departmental interests. Every decision should keep in mind what’s globally optimal for Valon.
- Deliver impact - We do the hard thing to get the job done—specifically, to get the job done right. Valon values high ownership, end-to-end accountability, and delivering concrete outcomes.
- Communicate with candor - Valon values intellectual honesty and direct communication for both individual growth and the best possible outcomes. We stay humble and open-minded.
- Act with urgency - We operate with a strong bias for action to make fast progress consistently. This compounds, and we win by moving mountains over long time periods.
- Reason from first principles - We believe in thinking deeply and precisely. We empower our team with deep business context so they can build their reasoning from the ground up rather than being bound by convention or what everyone else does.
- Focus on what matters most - We constantly assess and re-orient ourselves to do the work that matters most for the business. We are always laser-focused on pushing the business forward.
Company HQ
Union Square, New York, NY
Articles
Leadership
Andrew Wang
(CEO)Studied Computer Science at Harvard. Interned as a Software Engineer at The White House, and Google. Was an Analyst at Goldman Sachs. Spent 4 years as a Principal to Soros Fund Management.
Linda Du
(COO)Studied Computer Science and Statistics at Harvard. Worked at Samlyn Capital and Two Sigma prior to joining Valon.
Jake Mintz
(CPO)Studied Electrical Engineering at Santa Clara University. Co-founded Bump Technologies which was acquired by Google.
Share this job
View 10 more jobs at Valon Mortgage