Senior Cloud Security Engineer, Vivid Seats
Salary not provided
AWS
Senior level
Chicago
Ticket exchange and resale platform
Job no longer available
Ticket exchange and resale platform
501-1000 employees
B2CMarketplaceEntertainmentEvents
Job no longer available
Salary not provided
AWS
Senior level
Chicago
501-1000 employees
B2CMarketplaceEntertainmentEvents
Company mission
To empower every fan to get to the live events that shape their most vivid moments and memories.
Role
Who you are
- 5+ years of combined experience in information security engineering, operations and technology with at least 3 years of experience focusing on information security
- Extensive knowledge of current and emerging IT security technologies and techniques covering all levels of cloud and local IT architecture
- Understanding of AWS concepts, services and related controls
- Security operations experience including alert review and incident response
- Knowledge of information security concepts and technologies such as: networking, network segmentation, vulnerability scanners, firewalls, IPS\IDS, network analyzers, data loss prevention, security event management, encryption technologies, proxies, cloud services, mobile devices, etc
- Vulnerability management experience across multiple operating systems, databases, and applications, remediating issues with technical staff
- Experience in TCP/IP networking, firewalls and virtual private networks (VPN)
- Understanding of current encryption standards and implementation procedures
- Ability to work with engineering teams to weigh business risks and enforce appropriate security measures
- Ability to work both independently and collaboratively with peers, across teams and with management
- Experience with incident management and threat remediation including threat analysis, isolation, identification, and eradication
- Ability to handle multiple tasks and projects simultaneously
- Knowledge and experience with control frameworks such as ISO, NIST CSF, and PCI
- Passion for technology and information security
- A. or B.S. in Computer Science, Information Management, or relevant field
- Professional security management certification is desirable, such as Certified Information Systems Security Professional (CISSP), Certified Forensic Investigator (CFI), GFCA Certified Forensic Analyst (GIAC) or other similar credentials
What the job involves
- : As an Senior Cloud Security Engineer, you’ll be responsible for partnering with platform engineering teams to drive security practices and principles related to cloud-based infrastructure and with the service desk team to ensure that security controls are functioning as expected in the local IT architecture
- This role designs and implements security controls such as networking, network segmentation, vulnerability scanners, firewalls, IPS\IDS, network analyzers, data loss prevention, security information and event management, encryption, proxies, cloud-based security control services
- These controls are designed and implemented for cloud providers and local IT architectures
- This role will also be responsible for the detection, response and remediation of cyber related attacks
- This role integrates new technologies from a logging and incident response perspective and will work with a managed security service provider (MSSP) to respond to alerts, onboard new event sources and alerting use cases
- This is a hands-on technical position best suited for a professional with security engineering and operations experience and a background collaborating with multiple groups (project, business, architecture, and operational teams) across an organization
- Integrate with internal engineering teams providing frameworks to build, design and implement products across the organization securely
- Design, deploy and support internal security controls and network architectures
- Assist in the prompt investigation of security alerts and be prepared to isolate and remediate incidents pursuant to established procedures
- Support incident response operations and development of standard operating procedures, run books and related templates
- Provide training to the Vivid Seats community, fostering a security positive culture
- Support and assist in developing ongoing roadmap for security related projects
- Establish standard, repeatable practices to maintain a security program based on a well-defined security framework
- Mentor engineers, encourage team members and champion technology security across engineering teams
- Tackle some of the most difficult challenges securing an e-commerce marketplace by effectively embedding prudent security practices and features that maximize value and protect sensitive data
- Partner with a team of Product Owners, Quality Engineers and Engineers to ensure security throughout the software development lifecycle
- Ensure compliance with society, regulatory and industry standards for application security
- How your role expectations will progress as a Senior Engineer in the first 30, 60, and 180 days:
- 30 days in
- Complete new hire orientation, gaining the resources you need to be successful
- Learn how ticket marketplaces operate and how you’ll contribute to providing great experiences for our customers
- Acclimate to team and company norms, business objectives and Vivid Seats values
- Develop basic understanding of applications, tech stack and development process
- Understand our existing security practices, frameworks and tools
- 90 days in
- Enhance our approaches, methods or technologies associated with our security controls environment
- Engineer and support security controls and respond to alerts
- Partner with platform engineering team to understand AWS environment and to introduce security controls and best practices associated with build and deploy pipelines and AWS related infrastructure (EKS, ECS, EC2, security groups, VPC, IAM, etc)
- Build, maintain and leverage internal and external relationships to achieve progress and advance security objectives
- Apply technical learnings that align with the product roadmap and technology strategy to improve our overall security posture
- Support and assist in developing ongoing roadmap for security related projects
- 180 days in
- Design and implement process improvements that positively impacts the team and our overall security posture
- Mentor others and lead your team, playing an active role in elevating the skill sets of those you work with
- Guide the team's work so that it fits into the larger team and engineering group objectives
- Improve security in core systems and applications managed by the team and contribute to engineering group objectives
- Continuously evaluate the organization’s existing security practices, define and measure security-related activities, and demonstrating concrete improvements to the application assurance program within the organization
Our take
Founded in 2001, Vivid Seats is one of the leading online ticket marketplaces. The event tickets market is one of the biggest out there, expected to reach almost $85 billion by 2027, and the company has secured its place within it with partnerships with big players like ESPN, RollingStone, and the NBA.
The company's strategy has so far been based on massive public exposure through heavy spending on digital advertising, which has brought it great success to date. Its connects millions of buyers with thousands of ticket sellers each year, covering hundreds of thousands of different events.
Vivid Seats boasts high revenues and sustained growth, and went public in 2021. Following its listing on the NASDAQ, the company has been focusing on expanding operations and broadening its tech capabilities. A recent development is the company's Vivid Picks app, which combines live event and gaming experiences to target changing trends in the events ticket space.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
42% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
May 2014
$5.2m
SERIES A
Mar 2012
$3.9m
ANGEL
Total funding: $9.7m
Company benefits
- The Basics: We’ve got you covered with a variety of health, dental and vision packages to meet your needs: BCBS PPO, HSA and HMO plans, mental health and telehealth programs.
- Your Future: We care about what’s ahead for you. From competitive retirement and savings programs, to continuing education opportunities, and rewarding performance incentives, our goal is to grow your future in meaningful and sustainable ways.
- Recharge: We know employees who refresh, restore, and take time for life’s significant moments enjoy their work and are more productive. PTO, mental health days, and maternity/paternity policies give you the flexibility to make the most of your planned time off.
- Winning Together: We celebrate wins and stay connected as a team. Our teams are recognized in company-wide town-halls, hackathons, and product demos and enjoy in-office happy hours, holiday and summer events, and company sponsored sports leagues and competitions.
- Health = Happy: We are committed to a healthy lifestyle. We cover gym membership fees, host wellness weeks, provide plenty of nutritious snacks, cater smart choice lunches, provide access to on-site treadmill desks, bike storage, fitness classes, and inspiring office spaces where mindfulness can thrive.
- Convenient: We make work a little easier, providing hybrid working arrangements at accessible office locations. When you are in the office, you’ll have the tools (company provided laptops, monitors, software), room for ideas (open floorplan with plenty of meeting rooms, quiet areas, and whiteboards), and coffee. We’re talking good coffee.
Company HQ
West Loop Gate, Chicago, IL
Leadership
Stan Chia
(CEO)Board Director at 1871, and Board Member at the Georgia Institute of Technology. Former COO of GrubHub.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 11 more jobs at Vivid Seats