Security Engineer, ChartMogul

• Technical experience working (coding, debugging, etc.) with web applications
• Knowledge of cloud environment(s)
• 2+ years of professional experience in a technical role with security responsibilities
• Comprehensive understanding of various security fundamentals, including cloud security, networks, cryptography, and web security
• Proactive and independent, with a strong sense of urgency
• Able to make practical and effective decisions applicable to the dynamic nature of our product development world
• Next to speaking English fluently, you are able to understand and translate business requirements into clearly articulated technical solutions
• You can break down complex technical work into meaningful presentations for non-technical audiences

Desirable

• Whether you are a technical CISO or a security generalist, your role as a Security Engineer at ChartMogul will be all-encompassing
• Your daily tasks will include engineering work, policy management, and security awareness. Our SOC-2 Type 2 report has taken care of the heavy security paperwork, so your responsibility is to ensure ongoing compliance
• More importantly, we expect you to collaborate closely with our Product and Engineering teams to implement "frictionless security": product security improvements that don't slow down core product development
• Identify and fix security risks and vulnerabilities within our various codebases, both independently and through collaboration with other engineers
• Support our engineering teams on application security throughout the different stages of the development lifecycle, and propose secure-by-default building blocks
• Own and independently execute a long-term security product roadmap that includes both core security work and security-related product features. Collaborate with the Infrastructure team, Engineering leadership, and respective Product Managers to achieve this goal
• Own, manage, and update our Incident Response plan
• Facilitate and lead application security reviews and threat modeling, which includes code review and dynamic testing
• Maintain infrastructure security at various levels, ranging from containers up to the perimeter
• Lead annual security exercises related to our SOC-2 policies
• Work with Ops and Legal to coordinate efforts for SOC-2 Type 2 annual renewal
• Increase security awareness within the organization
• Continuously assess our security needs: Identify appropriate tools, speak to potential vendors, and find the right balance between buying and building solutions
• Be the main point of contact, internally and externally, for all security-related requirements

• Application Process
• Chat with our recruiter (30’)
• Coding round (related to security) (45’)
• Security (practical questions) (45’)
• Policy, Processes, Behavioral (45’)
• Chat with Legal & Ops (30’)
• Reference Checks
• Offer 🎉