Staff Security Engineer, Imprint

• 5+ years of application security, including threat modeling and security reviews
• 5+ years of cloud security experience in AWS, Azure, or Google Cloud environments
• Familiarity with various security tools and technologies, such as static and dynamic analysis tools, intrusion detection/prevention systems, and SIEM platforms
• Strong understanding of network security principles and practices
• Proficiency in developing and implementing security policies, procedures, and training programs
• Experience in creating and managing automated security tools and processes
• Strong understanding of secure coding practices and experience working closely with software development teams
• Proven ability to improve security processes and prioritize security initiatives
• Experience with vulnerability management, including reproducing, triaging, and remediating security issues
• Familiarity with compliance standards such as SOC 2 Type II, ISO27001, and PCI DSS
• Experience in conducting security audits and risk assessments
• Strong analytical and problem-solving skills, with the ability to identify and resolve complex security issues
• Excellent communication and interpersonal skills, with the ability to explain technical concepts to non-technical stakeholders
• Strong sense of ownership, urgency, and drive
• Bachelor’s Degree in Computer Science, Computer Engineering, Computer Security, Information Systems, or related field

Desirable

• The Security Engineering team at Imprint is at the forefront of democratizing access to cutting-edge technologies, empowering teams across our organization to innovate and excel
• Driven by our vision to redefine the Fintech landscape, our team is committed to building a secure, highly available infrastructure and arming our engineers with a comprehensive development toolchain, empowering them to bring to life world-class products swiftly
• Develop, update, and maintain threat models and conduct application security reviews for various software projects
• Create and implement security policies, guidance, and training programs for employees across all teams
• Lead the development of security processes and automated tools to prevent security issues
• Collaborate with software developers to ensure secure coding practices and establish a proactive security posture
• Partner with engineering teams to continuously improve security processes, priorities, and decisions
• Reproduce, triage, and address application security vulnerabilities, leading the team in these efforts
• Ensure compliance with SOC 2 Type II, ISO27001, and PCI DSS standards
• Support and manage the bug bounty program