Senior Compliance Engineer, Solo.io
Contract or Permanent
Delivering API infrastructure software
Open for applications
Delivering API infrastructure software
201-500 employees
Open for applications
201-500 employees
Company mission
To help simplify the journey to adopting and scaling cloud-native applications.
Role
Who you are
- The ideal candidate will have hands-on security compliance experience in a cloud native environment, as well as excellent customer facing and technical documentation skills
- 3+ years of InfoSec and security compliance expertise with successful track record of obtaining SOC2 and ISO-27001 compliance
- 2+ years of SOC analyst or security compliance management experience in a cloud native environment
- 2+ years of Customer Service or other customer facing experience
- 2+ Years of Prior SW development or DevOps experience
- 2+ years of SaaS and Cloud technical hands on experience
- 2+ years working with agile methodologies
- Highly desirable: 2+ years of Kubernetes hands on experience
- A passion about solving clients’ security challenges
- Well-developed technical writing skills
- Security Operations (SOC)
- Security Compliance (SOC 2, ISO 27001, PCI-DSS, HIPAA, etc.)
- Secure Software Development Lifecycle (S-SDLC) practices
- System Administration (Windows, Linux)
- Cloud Administration (AWS, Azure, Google Cloud)
- Network or firewall administration
- And have one or more of these experiences:
- Knowledge of security operations tools, systems, and practices (SIEM, WAF, vulnerability scanning, penetration testing, system hardening, MFA, SSO, etc.)
- Familiar with core networking concepts, protocols, and common services
- Understanding of encryption concepts and SSL/TLS certificates
- General scripting or coding experience
- Cybersecurity certifications (SSCP, CompTIA Security+, etc.)
- Experience with any security frameworks (NIST CSF, CIS, COBIT, etc.)
- A degree in Cybersecurity or a related field
What the job involves
- The Infosec and Compliance Engineer plays a pivotal role securing Solo’s infrastructure, data and software
- This person is responsible for helping Solo.io define, establish and manage our corporate security strategy
- This is a hands-on role helping Solo build and define the security compliance mechanisms for our products and services
- It involves working with all departments at Solo.io to identify areas relevant to each department for compliance purposes, providing expert guidance
- In addition, this person will help implement and document applicable policies and processes
- The fractional CISO will work directly with auditors leading our security compliance
- This resource may also work with our customers and prospects to understand security requirements, respond to security related inquiries and help Solo establish security commitments between both parties
- Lead Internal Cybersecurity Audits to ensure our operational environments stay compliant and secure
- Respond to security questionnaires from our customers to help us grow our business and articulate Solo’s security compliance approach
- Act as liaison between us and our customers
- Perform quantitative Risk Assessments to help internal teams understand where to make smart investments in cybersecurity
- Author security policy documents to build up our security and cybersecurity programs
- Assist with evidence collection to help us prepare for external compliance audits utilizing our compliance automation tool Vanta
- Provide advice and guidance on a wide range of cybersecurity topics
- Project manage security deliverables to keep us on track
- Contribute to service development programs to improve our deliverables
- Help define and build security strategy company wide and for each department
- Work with all internal departments to establish security standards and processes to comply with corporate security strategy
- Provide expert guidance to departments and teams on ongoing security compliance requirements
- Provide training as needed to practice how they will respond to a cybersecurity incident
- Help establish security compliance plan company wide, including but not limited to SOC2 and ISO27001 compliance
- Work with auditors to provide compliance evidence as needed, while working with departments to establish said processes in order to comply
- Responsible for managing adherence to company information security and data privacy standards and frameworks including SOC 2 and any others deemed applicable
- As needed, author compliance documentation and policies
- Own maintaining compliance with relevant data privacy and information security laws and regulations (e.g. GDPR, CCPA)
Our take
Service meshes are a critical piece of infrastructure for a lot of companies that aim to be cloud-native, with hundreds or more microservices, businesses need a way to track what’s running in their networks. Solo.io provides connectivity between microservices in the cloud through its API gateways and service mesh.
The unicorn company hit its $1B valuation in 2021 and was one of the only to be led by a woman. The company’s growth is due in part to the growing number of companies re-architecting their applications to microservices and Kubernetes, gaining new customers, and its 100% business renewal rate and account expansion from existing customers.
Solo.io counts some of the world’s biggest data centres and Cloud services as customers, including T-Mobile, Pega, BMW, American Express and Booking.com. The company has used its Altimeter Capital-led Series C funding round to expand its offerings, developing new products and adoptable technology.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 4 rounds)
Oct 2021
$135m
SERIES C
Sep 2020
$23m
SERIES B
Total funding: $171.5m
Company benefits
- Medical/Dental/Vision Insurance
- 401(k) & FSA
- Paid Holidays
- Growth Culture
- Catered Snacks
Company values
- Real, Meaningful, and Visible Impact
Company HQ
Kendall Square, Cambridge, MA
Articles
Leadership
Idit Levine
(CEO)Former CTO at Dell EMC. Current Member of the Technical Advisory Board at Cloud Foundry Foundation. Previous Director of Intigua Lab (Office of CTO) at Intigua. Worked as a Software Engineer at CloudSwitch, DynamicOps, Asset Management Advisors, BlueWave Security, EOS International, and Matrix Inc.
Share this job
View 5 more jobs at Solo.io