Senior Security Operations Engineer, ArtBlocks

• 4+ years of relevant experience in, security, SRE, IT, or similar role at a technology company and 4+ years working in security operations
• Experience with managing and deploying MDM solutions like Kandji, JAMF, Hexnode, InTune, etc
• Experience with deploying and managing Identity and Access Management (MFA, SSO, Password Management, etc.)
• Familiarity with incident response in AWS, SaaS, MacOS, and Linux
• Experience with mass deployment of security products in regards to email security and systems security
• Automate security analysis, administration and remediation procedures, workflows, and tasks
• Familiarity with modern cloud security stack that spans cloud and device management
• Experience with one or more object oriented programming language (e.g. Java, Python, etc.)
• Solid problem solving and communication skills that you’ve honed by collaborating across teams in prior roles
• Ability to navigate ambiguity and map a path towards sustainable, elegant solutions
• Deep subject matter expertise in IT and security engineering best practices
• Hands on experience using Identity and Access Management (IAM) and Mobile Device Management (MDM) programs to manage risks & create a secure ecosystem
• Experience building and developing processes to enforce least privilege in a transparent way to manage security threats
• A detailed understanding of securing the work environment and technical ecosystem of a fully distributed team, including significant experience securing and managing distributed Apple, Linux, and Windows devices
• Deep familiarity with cloud based services, their integrations, and associated risk models
• Exposure to and interest in code-as-infrastructure patterns
• Owned multiple full-lifecycle projects from design through implementation
• Your experience with our specific technical stack (or any specific stack) is of secondary importance to us. We care much more about finding candidates who have solid fundamentals, general aptitude, a desire to learn, and are compassionate and collaborative people to work with. We understand that it will take time to ramp up and are excited to consider non-traditional candidates who are excited about what we are building

Desirable

• Design, implement, and maintain systems to help us operationalize our security and make secure decisions clear. You’ll stay on top of evolving threat intelligence and vulnerability data to help Art Blocks respond to active and potential threats
• Define, implement, and refine how we manage endpoints to solve the question of how we double in size and get more secure. You’ll be identifying gaps in our systems, designing new solutions, and driving implementation to meet the needs of our growing organization
• Orchestrate and monitor our cloud-based systems to detect and respond to threats through our whole ecosystem. You’ll prioritize the risks and strategically take action to solve the most critical issues first
• Actively contribute to our vulnerability management program by aligning our monitoring and mitigation efforts with known vulnerabilities
• Lead emerging trend research, orchestrate product evaluations, and select the latest industry standards and tools. Help us see around corners by researching and testing new technologies that can improve our security posture
• Lead the strategic design, implementation, and support of cutting-edge IT security tooling across cloud services, empowering our fully distributed team
• Perform security and risk assessments, threat modeling, and remediation in collaboration with engineering
• Conduct vulnerability scans, perform attack simulations, and coordinate pen-tests
• Collaborate with engineering to implement a secure infrastructure
• Drive concurrent projects and manage competing priorities by communicating proactively
• Drive operational excellence through documentation of best practices and comprehensive employee training initiatives
• Leverage your expertise to perform in-depth system analysis, identifying opportunities to implement robust defense mechanisms while strategically planning for future scalability
• Foster collaboration with cross-functional teams, including engineers and key stakeholders, to ensure the seamless delivery of reliable services, APIs, and critical systems
• Work collaboratively with product teams, drive collaboration across the distributed organization, and participate in on-call rotation if necessary in the future