Security Analyst, Beautycounter
$92-115k
Office located in Santa Monica. CA
Natural, safer beauty and skincare products
Job no longer available
Natural, safer beauty and skincare products
1001+ employees
Job no longer available
$92-115k
Office located in Santa Monica. CA
1001+ employees
Company mission
To get safer products into the hands of everyone.
Role
Who you are
- Familiarity with ISMS (Information Security Management System) and security controls, particularly ISO 27000 series, CIS, and NIST and best practices for vulnerability and patch management, change control, securing the development lifecycle and the CI/CD pipeline
- Experience with PCI DSS and PCI self-certification processes are preferred
- Excellent time management and communication skills
- Previous experience with omnichannel retailers, development pipelines, and ecommerce platforms is preferred
- Strong ability to research, identify problems, and determine the next course of action
- Demonstrated ability to drive projects to successful completion
- Familiarity configuring and using vulnerability management scanning tools such as
- Tenable and Arctic Wolf
- 5+ years' experience in information security analyst roles
- Advanced knowledge of information security concepts and technical controls
- Relevant industry certifications such as CISSP are preferred
What the job involves
- Provides operational support for security tool alerts, identifying, auditing, monitoring, triaging, and response
- Conducts and coordinates vulnerability scans and penetration tests on systems, infrastructure, development pipeline, and other environments, documents findings, and recommends risk mitigation strategies
- Operates, administers, and monitors security tools such as vulnerability management, DLP, and others
- Assists other cross-functional staff in identifying and implementing appropriate security safeguards, including patching and improved configuration
- Executes information security activities such as vulnerability management, application development security, business continuity, incident response, risk management, configuration management, etc
- Acts as the first response to security events and incidents, triaging and coordinating response
- Assists with implementation of projects and other security domains and certificate management, patch management, configuration management, security awareness, and others
- Aids in developing and improving existing processes and solutions through automation, upgrades, and integration with various systems, tools, and data sources
- Works closely with DevOps, engineers, and IT support personnel on improving configuration and implementing best practices, version control, lifecycle management, patching, and automation
- Supports cyber incident response actions to ensure proper assessment, containment, mitigation and documentation
- Conducts and directs risk assessments for identity and access controls
- Owns security maintenance cadence for penetration testing and vulnerability scanning
- Manages technology personnel operations including multi-factor authentication, access
- Permissions and integration points
- Reviews system configuration for security issues and proactively works with stakeholders
- On improvements to ensure the security of systems and data
- Updates security controls and provides support to all stakeholders, performing internal
- Assessments and implementing strategies that aid in protecting company assets and
- Customer data
- Supports various information security framework control gap assessments,
- Implementation of framework management systems, gap remediation, ongoing
- Management, and continual improvement initiatives
- Assists with third-party risk identification, management, surveys, and review processes
- Aids in developing and ensuring effective security awareness training campaigns
Our take
Beautycounter is a 'clean beauty' cosmetics business with a focus on the safety of the products it sells, strictly avoiding any harmful chemicals in it's line. The business has assembled a 'Never List' containing over 1,500 harmful ingredients that it claims will never make it into its products.
Operating a direct-to-consumer model, Beautycounter utilises a variety of selling methods, leveraging its own e-commerce platform, products in stores, and over 55,000 independent sellers. It's a competitive space, with brands like Lawless, Honest Beauty (who also have a 'No List') and Pacifica offering similar services in the D2C space.
In 2021, private equity firm Carlyle Group bought a majority stake in Beautycounter and the business is now valued at over $1 billion. While clean beauty was a little-known concept when the company was founded, it’s now an area that’s increasingly popular with the public and so Beautycounter continues to grow at speed.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-2% employee growth in 12 months
Company
Funding (2 rounds)
Mar 2018
$65m
SERIES B
Dec 2014
$21.3m
SERIES A
Total funding: $86.3m
Company benefits
- Unlimited PTO (Full-time Exempt)
- Comprehensive Medical, Dental and Vision Benefits
- 401k Plan with 100% Match
- Flex Fridays All Year Round
- Mental Wellness Support
- Amazing Product Discounts
Company HQ
Santa Monica, CA
Leadership
Marc Rey
(CEO)Previously CEO at Shiseido, President at Coty and YSL Beaute, Giorgio Armani & Ralph Lauren Beauty.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job