Senior Security Engineer, Angi
$175-185k
On-demand marketplace for home services
Job no longer available
On-demand marketplace for home services
1001+ employees
Job no longer available
$175-185k
1001+ employees
Company mission
To help people love where they live, by becoming the home for everything home.
Role
Who you are
- You have a BS or an MS in Computer Science, Computer Engineering, Cyber Security, or a related field
- You have 5+ years of experience working on a security team supporting product/engineering functions, cloud infrastructure, and corporate infrastructure development
- You have in-depth knowledge of security threats, applied cryptography, and risk assessments
- You have hands-on experience in AWS specifically with one or more of the following AWS services: GuardDuty, Config, WAF, Shield, Macie, CloudTrail, SecurityHub
- You have hands-on experience writing infrastructure-as-code in languages such as Terraform, CloudFormation, Helm, etc
- You have software engineering experience (Python/Java/Scala/Ruby preferred) and an engineering mindset for building reliable and maintainable security infrastructure to support a large organization with CI/CD software engineering practices
- You have experience working with product development teams to empower them on advancing security initiatives
- You are familiar with the OWASP Top 10 vulnerabilities and how to remediate them
- You are familiar with authentication and authorization frameworks or standards such as OAuth, OIDC, SAML, etc
- You have a willingness to learn and apply new skills and technologies
- You have hands-on experience working with container technologies and Kubernetes
- You have hands-on experience with data analytics and observability concepts and associated tooling (SQL, Looker/Tableau, Grafana LGTM stack, NewRelic, etc.)
- Experience defining and implementing internal practices and controls for the PCI-DSS and Sarbanes-Oxley (SOX) information security and compliance standards is a plus
- Experience presenting at industry conferences or contributing to open source communities is a plus
- Experience with penetration testing methodologies and tools (BurpSuite, OWASP Zap, etc.) is a plus
- Experience with infrastructure vulnerability scanning tools (Qualys, Rapid7, Tenable, etc.) is a plus
- Experience with static analysis tools (Qwiet.ai, ShiftLeft, Fortify, Veracode, Snyk, etc.) is a plus
What the job involves
- Implement security best practices in our cloud and on-premise IT environment following industry standards / recommendations
- Identify vulnerabilities, missing patches, and misconfigurations across our cloud, on-premise, and employee infrastructure and ensure there is a scalable approach to prioritizing fixes for any issues identified
- Implement various types of scanning in our CI/CD pipelines and ensure results are appropriately surfaced to developers
- Ensure relevant audit and security logs are collected to a central location and exposed to the correct teams for triage, analysis, and incident response
- Work with auditors and compliance teams to meet required policies and collect required evidence
- Work with infrastructure engineering teams to ensure that all endpoints throughout the organization are configured with industry aligned security standards, that they have the relevant security tools (MDM, EDR, etc.) installed, and that administrative rights are not needed for non-power users
- Actively participate in the design and implementation of applications, services, and infrastructure to ensure security and privacy design principles are being followed
- Triage, escalate, and remediate vulnerabilities found as part of our bug bounty program
- Work with the product management teams to prioritize fixes for vulnerabilities and work with engineering teams to understand how to fix these issues
- Get your hands dirty by fixing vulnerabilities, building in security telemetry/instrumentation, and adding security features to our products/applications
- Design tooling and frameworks to make adoption of security best practices easier for developers when working in our code bases
- Deploy, manage, and tune infrastructure used to protect our applications from common vulnerability exploitation, account takeover, and denial of service attacks
- Assist in the creation and maintenance of security training
- Actively participate in all facets of the incident response lifecycle by participating in a 24/7 on-call rotation
Our take
Angi is a result of the 2017 merger of popular local services review platform Angie’s List, and prescreened contractor sourcing platform HomeAdvisor. The resulting platform provides a digital marketplace for homeowners to browse and secure home services, projects, and contractors.
Angi is performing particularly well in North America and has helped over 150 million homeowners. Certainly, the company has embarked on what should prove a majorly lucrative partnership with Walmart over coming years. Angi services will be marketed and available at Walmart both online and offline, giving the company a shot at netting some of Walmart’s 220 million global customers.
What's more, Angi's membership option attracts a huge number of subscribers. This has drawn more activity to the site, with members returning three times more to complete additional requests compared to non-members. This launch as well as the partnership with Walmart has propelled Angi firmly down the path of further expansion.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Full medical, dental, vision package to fit your needs
- Flexible vacation policy; work hard and take time when you need it
- Pet discount plans & retirement plan with company match (401K)
- The rare opportunity to work with sharp, motivated teammates solving some of the most unique challenges and changing the world
Company HQ
River North Art District, Denver, CO
Leadership
Angie Hicks
(Chief Customer Officer & Director)A Harvard Business School Graduate who went on to found Angie's List, which eventually became Angi.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job