Security Engineer, ComplyAdvantage

• Previous roles focussed on cloud infrastructure and SaaS security
• Knowledge of information/cyber security standards, e.g. SOC 2, ISO 27001, CIS Controls, CSA STAR, OWASP ASVS, BSIMM
• Experience with securing the SDLC and CI/CD/CO pipeline
• Solid understanding of the majority of the following technologies: Windows, Mac, Linux, containerisation, relational and NoSQL databases, SSO, DHCP, DNS, SSH, PKI
• Experience of audit processes and the need for good record keeping
• An aptitude for technology with previous roles working in a technical discipline, such as IT Operations, software development or network/security operations
• Excellent communication skills with the ability to translate complex, technical matters into plain English
• Demonstrable ability to empathise with stakeholders to present security in a positive light

Desirable

• Assessing the security of our SDLC and deployed products to help prioritise security engineering work
• Engaging with engineers and product owners to carry out threat modelling, privacy and security by design activities
• Working with engineering teams to assess and manage security risk within their codebase and suggest mitigation strategies
• Working with the Site Reliability Engineering team and the wider engineering community to build automated security assurance tools into our CI/CD pipeline
• Creating and evangelising best practice and security policies across the business
• Ensuring ongoing compliance with SOC 2, ISO 27001 and related security programmes
• Building and maintaining security infrastructure through Infrastructure as Code tools such as Terraform
• Building out our security operations capabilities, including automating monitoring, alerting and response
• Responding to security alerts raised to ensure speedy remediation and root cause analysis