Senior Product Security Engineer, Navan
$127.5-230k
Travel management company
Open for applications
Travel management company
201-500 employees
Open for applications
$127.5-230k
201-500 employees
Company mission
To reinvent the legacy category of travel and expense with one of the first enterprise technologies utilising the cloud, mobile, and AI to balance business needs with today's modern standards.
Role
Who you are
- Bachelor's degree in Information Security, Computer Science, Computer Engineering, or equivalent work experience
- Minimum 7 years of consistent detection & response experience performing triage/incident response in enterprise SaaS environments
- Expert knowledge of the cyber threat landscape – able to articulate and incorporate into program understanding of major threat categories, motivations, and intent of adversaries against enterprise assets
- Experience in at least one programming language, Python, Go, C, C++. Alternatively deep expertise using low-code automation tools or SOAR platforms is a plus
- Experienced in driving monitoring and automation in cloud environments, preferably knowledge of AWS
- Strong understanding of advanced persistent threats, attacker methodologies, attack lifecycle, cyber kill chain, and the MITRE framework
- Understanding of digital forensics techniques and closely related areas
- Exceptional collaboration skills and communication skills, with the ability to engage with partners and stakeholders with a variety of perspectives and technical understanding
- GIAC security certification such as GCIA, GCIH, GREM, GPEN (or equivalent), multiple preferred
- SaaS / FinTech / anti-fraud experience a plus
- Automation first mindset
What the job involves
- The Staff Security Engineer, Detection and Response you will be responsible for the detection strategy, creation, tuning, validation, and correlation to ensure that we have effective detections in place against an ever-changing threat landscape
- This role is hands-on, carrying the responsibility of running the day-to-day security operations tasks including management of SIEM, detection engineering platform and helping incident response
- Reporting into the Director of Security Engineering, the ideal candidate will maintain and enhance a consistent and reliable operational security environment and take a proactive security monitoring approach
- This role has high visibility and requires a technical individual who can partner with stakeholders and cross-functional teams (Engineering, Product, SRE, IT, Legal, etc) and has the ability to adapt in a dynamic security landscape
- Responsible for building and expanding detection capabilities across a variety of platforms
- Responsible for security event monitoring, management and response, workflows and tasks
- Improve security monitoring and operational tasks by developing measurement capabilities and metrics to track and communicate performance, coverage and risk
- Evaluate existing SIEM rules, filters, events and use cases and adapt them to meet the business requirements
- Mature security operations; drive integration of new log sources, tools and services
- Create, maintain and manage a library of automated playbooks to address new threats and tactics employed by attacker
- Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives
- Build and maintain tools to proactively monitor and respond to emerging threats
- Assist the Security Incident Response Program with related matters resulting from security investigations
- Participate in key security initiatives as the Subject Matter Expert to ensure alignment with strategies and roadmap
- Develop standard operating procedures and other appropriate documentation to enforce quality and consistency of services being delivered
- Support ongoing security compliance, audit, and certification programs (e.g., PCI, HIPAA, SOC2)
Our take
Navan (formerly known as TripActions) is operating in a crowded marketplace, betting against rivals with similar offerings of user interface personalisation technology. Even so, the company's growth has skyrocketed and it has attracted significant investor interest. Competitors cannot match Navan's cutting-edge, AI-driven services, as well as 24-hour customer support.
Since its founding in 2015 the company has seen significant growth in transactions and in active users. Having expanded from its core travel expense management product, it now offers a corporate card and general expenses management, underwriting its customers' short term business expenses with its own Liquid financial offering. Navan has a list of impressive clients, including Glassdoor, Zoom, and Shopify.
Moving forwards, the company is focused on gaining more reach, especially in Europe. As part of the expanded go-to-market strategy, it rebranded to Navan with a more people-centric design approach. It also combined its travel, corporate card and expense services into a single app which is now available to individual users rather than only through a corporate account. This will be key in bridging the gap between business travel and consumer apps.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Some candidates hear
back within 2 weeks
45% female employees
-40% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Oct 2022
$154m
SERIES G
Oct 2021
$275m
SERIES F
Total funding: $1.1bn
Company benefits
- Flexible Vacation
- Healthcare
- Commuter benefits
- Parental leave
- Health and Wellness
- Fuel for Connection
- Pet Friendly
- 401k (retirement plan)
- IATAN (travel-related discounts)
- Connectivity Allowance
- Learning & Development
Company values
- Focus on Users
- Tech-Forward Solutions
- Lead with Context
- Communicate with Candor
- Raise the Bar
- One Diverse Team
Company HQ
Ventura, Palo Alto, CA
Articles
Leadership
Ariel Cohen
(CEO)Research and Development director in Mercury Interactive (and HP after acquisition of Mercury). Product Management director, then VP, at Jive Software. Previously co-founded StreamOnce with Ilan.
Ilan Twig
(CTO)Studied Computer Science, managing positions in software engineering including VP and EVP of engineering at Jive Software. Previously co-founded StreamOnce with Ariel.
Share this job
View 63 more jobs at Navan