Lead Engineer for Security and Compliance, Radar

• Have experience managing AWS environments with Terraform
• Have experience as a security or infrastructure engineer
• Be interested in talking to customers or prospects and making them successful
• Be deeply curious about how things work, and have the tenacity to sit with hard problems and power through them

Desirable

• We're looking for an Engineer to lead our Security & Compliance efforts
• Manage the security and compliance posture of our AWS environment (Security Groups, IAM, VPC, Flow Logs, SSO, Inspector, Security Hub, GuardDuty, KMS, S3, EC2)
• Answer all customer "infosec" questionnaires during sales cycles
• Be a key contributor during our SOC 2 audit and participate in ongoing security and compliance activities year round
• Run our annual 3rd party penetration test and vulnerability disclosure program and remediate findings
• Participate in weekly compliance meetings to monitor compliance of the entire organization
• Handle the full life cycle of security alerts and remediation
• Talk to Radar customers and prospects, hear their feedback, incorporate it into your work and make them successful
• The stack:
• Our infrastructure runs on AWS, managed by Terraform
• We leverage AWS Security Hub for cloud monitoring, AWS Inspector for vulnerability monitoring and AWS GuardDuty for intrusion detection and malware prevention
• Servers and employee endpoints are hardened leveraging CIS benchmarks and hardened images
• Snyk and Github Advanced Security monitor our codebase and libraries for vulnerabilities and patch them
• Our SIEM is AlienVault and our alerting tool is PagerDuty
• Most engineers are in the on-call rotation, which handles Medium and High Severity security alerts
• Our employee endpoints are macOS managed by JAMF and JAMF Protect
• Our issue tracking tool is Linear
• Our compliance tool is Vanta
• Our Penetration Test and Vulnerability Disclosure Program are run by Hackerone
• You’ll work with:
• Tim Julien, CTO
• Craig Kochis, Director of Engineering
• Jeff Kao, Senior Staff Engineer
• Our customers and prospects
• Our Customer Success, Sales Engineering, and Sales teams

• After a brief call with our CTO, we'll invite you to our NYC HQ for an interview if we think there is a possible match
• During that time we'll work on system design problems together and do some coding for 2 hours to build something simple
• You'll meet one of our co-founders and we'll also go into more depth about how we work to see if there is a match