Detection Security Engineer, Lacework
$220-300k
+ Benefits + Bonus + Equity
Data driven cloud-native application protection platform
Job no longer available
Data driven cloud-native application protection platform
501-1000 employees
Job no longer available
$220-300k
+ Benefits + Bonus + Equity
501-1000 employees
Company mission
To be the security platform for the cloud.
Role
Who you are
- 10+ years of experience in a security engineering role
- Deep knowledge of current threat intelligence and modern attacker exploits
- Deep knowledge of incident response and forensics (DFIR) in a large-scale environment
- Ability to write code in common languages like Python, Java, Go or Rust
- Good AWS knowledge and hands on experience. Bonus for experience with all three major cloud providers (AWS, Azure, GCP)
- Good knowledge and experience with network protocols, cryptography, security threats, attack techniques, evasive techniques, detection and prevention methods
- Good knowledge of Docker/Kubernetes and how to secure those environments
- Understanding of real-time threat detection, secrets management, security considerations within build, release, CI/CD and other similar tooling
- Good understanding of the fundamentals of systems hardening
- Good understanding of database knowledge, with Snowflake experience being highly desirable
- Familiarity with observability and monitoring tools
- Experience working remotely across many time zones and cultures
- Excellent written and verbal communication skills, with the ability to target your communication to the audience, whether technical or not
What the job involves
- Our focus is to ensure our systems continue to detect world class attacks as well as to reduce risks in our software and systems. That is to ensure they are designed and implemented in a secure manner
- We work collaboratively across the whole company to accomplish these goals and we’re a growing team that’s looking for a smart, experienced, energetic, and a humble security engineer
- Actively monitoring our systems for attacks and intrusions, responding to potential security incidents, working with the product team on product improvements and enhancing the platform with new detection ideas
- Develop an in-depth understanding of the Lacework platform and the stack it is built on, that is you will become an expert at using our own Lacework platform to secure all of Lacework - the company
- Participate in an on-call rotation that looks after and responds to security events
- Willing and able to automate, automate, automate!
- Develop new and optimize existing detection use cases, contribute to operational runbooks, wikis, how-tos, topology diagrams - as needed
- Respond to security incidents, determine remediation, escalate as appropriate, and proactively consider how to prevent the same type of incident from occurring in the future
- Become an expert user of Lacework
- Work with other teams to discover new detection capabilities
- Assist with code reviews, evaluate code for security issues and participate in secure code designs
- Build security utilities and tools for internal use that enable you and other Security Engineers to operate at high velocity; and extend that use to other teams in a DevSecOps cultural model
- Provide subject matter expertise on architecture, authentication and system security
- Advocate for best-security practices to the entire engineering organization
Our take
Lacework is a cloud security startup that simplifies cloud security, reduces incident noise, and cuts down on the number of interfaces that businesses need to use. It helps businesses reduce their expenses and the time spent manually tracking issues.
Lacework offers a full package of cloud security services for its customers, covering security for infrastructure as code, scanning for vulnerabilities in build-time and run time, runtime security for cloud-native environments, and configuration and compliance.
The company faces competition from businesses like Threat Stack, Prisma Cloud, and Aqua Platform. However, as more companies move online and the need for secure cloud-native services continues to grow, Lacework has ample opportunity to see continued growth as the leading CNAPP solution.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-6% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Nov 2021
$1.3bn
SERIES D
Jan 2021
$525m
SERIES D
Total funding: $1.9bn
Company benefits
- Competitive medical, dental, and vision plans
- Employer contribution to health savings account (HSA)
- Flexible Spending Accounts (FSAs)
- Employee Assistance Program
- Flexible vacation time
- Parental leave for birthing and non-birthing parents
- Recharge days
- Paid holidays
- 401(k) for eligible employees & competitive global retirement plans
- Life insurance for eligible employees
- Short term disability
- Long term disability
- Flexible health and mental wellness stipend
- Home internet & cell phone stipend
- Commuter benefits
Leadership
Vikram Kapoor
(CTO)Studied Computer Science at Indian Institute of Technology, and University of Minnesota. Worked as a Senior Software Engineer at Valicert Inc; Kuokoa Networks; and Pillar Data Systems. Worked for over 6 years at Oracle Corporation in Development Management. Was Senior Director of Engineering at Bromium. Was Entrepreneur in Residence at Sutter Hill Ventures.
Share this job