Senior Corporate Security Specialist, Robinhood

• The business is seeking curious, growth-minded thinkers to help shape our vision, structures and systems; playing a key-role as we launch into our ambitious future. If you’re invigorated by our mission, values, and drive to change the world — we’d love to have you apply
• 5+ years of relevant security engineering work experience
• Experience with creating alignments and effective partnership with multiple teams on high impact projects while operating with ambiguity
• Consistently make culture choices that positively impact all of engineering
• Background in security policy authorship and opaque product assessment
• Deep experience with macOS. ChromeOS and Windows are a plus
• Experience with Google Workspace, Slack, AWS, GCP and Azure are a plus

Desirable

• Architect, build and proactively secure corporate infrastructure and services at scale, and securely enable business functions
• Implement strong enterprise controls such that security incidents are less likely to happen
• Have controls in place to limit the potential magnitude of an incident
• Validate our controls through technical tools and design reviews to ensure the required security policies/standards are met at scale and on an ongoing basis
• Build secure access controls and policies using modern-era tools and techniques (e.g. WebAuthn, Okta SSO, Okta Identity Governance OIG, PKI, JIT access)
• Oversight on Deploy Data Loss Prevention (DLP) solutions focusing on PII and PCI related data that may be in SaaS applications (e.g. GWork, Jira, Confluence, Salesforce, ServiceNow)
• Perform vulnerability management assessments across SaaS to detect vulnerabilities and security mis-configurations in enterprise applications
• Help craft the overall security strategy for M&As from due diligence through post-close integration
• Implement endpoint state attestation tooling to ensure security configurations (e.g., OSquery, FleetDM, nanoMDM, JAMF, Okta Verify, SentinelOne, Crowdstrike)
• Light scripting or using "no code" workflow tools (e.g., Tines, Okta Workflows, Zapier)