Senior Security Engineer, Shakepay

• 5+ years of broad Security experience, including but not limited to; Enterprise & Operational Security, Incident Response, Offensive Security, GRC, and Product Security
• 5+ years experience in a cloud environment (AWS preferred)
• Proficiency in a high-level programming language for building and maintaining our alerting capabilities and to automate Security tasks
• Clear sense ownership and exceptional communication skills to manage expectations, timing, scope, and priority of the work you’re responsible for
• Passion for scaling Security through simplicity and enabling a Security first culture
• Experience in a highly regulated environment (preferably a startup)

Desirable

• As a Senior Security Engineer, you will play a pivotal role in safeguarding Shakepay’s digital assets, infrastructure, and our customer’s data against cyber threats
• You will leverage your deep technical expertise in identifying, developing, and implementing security measures, protocols, and strategies collaboratively across various domains
• This role will have an outsized impact on Shakepay’s environment and the security of Shakepay and our customers’ assets and data
• This role will report to the Head of Security
• Work closely with across all of Shakepay to design and drive high impact solutions with the right balance between security, customer experience, and product growth
• Be a subject matter expert and mentor across multiple domains within security and provide impactful output that can be ingested by both operational and engineering focused teams
• Manage relationships, internally and externally, regarding Security processes, services, and vendors
• Lead threat modeling discussions for both existing production systems and systems in development
• Own maintaining and improving our Zero Trust environment
• Build, tune, and automate alert responses in code
• Participate in an on-call rotation and serve as the technical lead during incidents
• Participate in governance, compliance, and regulatory audits (SOC2, ISO 27001, PCI, etc.)