Threat Engineer, Pluralsight
$106.4-140k
+ Bonus eligibility
More information about location
Technology workforce development company
Be an early applicant
Technology workforce development company
1001+ employees
Be an early applicant
$106.4-140k
+ Bonus eligibility
More information about location
1001+ employees
Company mission
To inspire and empower the tech workforce to achieve their goals.
Role
Who you are
- A Self-Starter with Radical Ownership: You don't wait for a ticket to tell you something is wrong. You hold the authority to detect gaps and resolve them
- A Technical Translator: You can interpret a complex exploit payload or an unprocessed intelligence report and convert it into actionable requirements for a developer
- A Balanced Pragmatist: You understand that "secure" shouldn't mean "slow." You strive to integrate security into the engineering workflow rather than obstructing it
- A Diligent Gatekeeper: You hold external vendors and researchers to a high standard, ensuring that every pentest and bug bounty report adds genuine value to our security posture
- Analytically Rigorous: You enjoy the "hunt"—whether it's tracking down a typosquatted domain or reproducing a sophisticated OWASP Top 10 vulnerability
- Vulnerability Validation: Proven hands-on experience in manually assessing web application and cloud vulnerabilities. You should be comfortable reading code and executing payloads
- Program Management: Strong organizational discipline to manage external vendors and audit contractor workflows without needing direct authority
- Technical Breadth: A solid understanding of DNS configurations, web architectures, and how threat actors pivot through an external attack surface
- Strategic Thinking: Experience working on problems of diverse scope where you must devise solutions based on limited information or precedent
- Preferred certifications: Threat Intelligence & Defense: GIAC Cyber Threat Intelligence (GCTI), CompTIA Cybersecurity Analyst (CySA+/SecurityX). Offensive Security & AppSec: GIAC Web Application Penetration Tester (GWAPT), Offensive Security Certified Professional (OSCP), or CompTIA PenTest+. Security Program & Audit Governance: Certified Information Systems Security Professional (CISSP), ISACA Certified Information Systems Auditor (CISA), or Certified Information Security Manager (CISM)
- Requires 5+ years of related or equivalent experience within security operations, threat intelligence, or product security; or 3+ years with an advanced degree
- Works on problems of diverse scope where analysis of information requires evaluation of identifiable factors. Devises solutions based on limited information and precedent and adapts existing approaches to resolve issues. Uses evaluation, judgment, and interpretation to select the right course of action. Work is done independently and is reviewed at critical points
- Proven experience manually validating web application and cloud vulnerabilities. Ability to critically review third-party pentest reports to ensure vendor quality and accuracy
- Strong organizational discipline to manage external testing vendors, audit contractor workflows, and drive cross-functional remediation efforts without requiring direct authority
- Experience managing corporate domain portfolios, DNS configurations, and digital brand protection strategies
What the job involves
- We are a lean, fast-paced organization where security is paramount, but engineering velocity is sacred. We are looking for a highly adaptable Threat Engineer to take charge of our external attack surface, offensive security oversight, and human risk programs
- In this role, you will act as the critical bridge between external threat landscapes and our internal engineering teams
- You will operate our incoming threat intelligence, manage our corporate domain portfolio, coordinate our crowdsourced bug bounty program, and provide technical oversight for our outsourced penetration testing
- Your job is to identify, validate, and ensure the neutralization of external threats and vulnerabilities before they impact our platform or our B2B trust
- Govern Penetration Testing: Manage outsourced penetration testing programs, ensuring scopes align with compliance and business risk. Act as the primary technical point of contact to unblock vendors and ensure rigorous testing
- Audit Remediation: Oversee the vulnerability pipeline, ensuring findings are accurately translated into Jira tickets and tracking developer SLAs through to resolution
- Triage Bug Bounties: Act as the first line of defense for our crowdsourced vulnerability disclosure program; reproducing and validating exploit reports from external researchers
- Monitor & Analyze: Daily triage of our Threat Intelligence Platform (TIP) for credential exposures and active exploits. You’ll translate raw intelligence into proactive defensive measures
- Domain Administration: Serve as the primary admin for our Enterprise Domain Management platform, handling registrations, renewals, and DNS security (DNSSEC, DMARC, etc.)
- Takedown Management: Actively monitor for typosquatting and brand impersonation, initiating takedowns when malicious intent is confirmed
- Phishing Simulations: Design and analyze organizational phishing campaigns to improve employee resilience
- Incident Escalation: Serve as the lead investigator for user-reported phishing and social engineering attempts
Our take
Pluralsight is dedicated to closing the global tech skills gap, a mission that has become increasingly urgent as industries worldwide face a growing shortage of IT talent. This high demand for upskilling makes Pluralsight's online training services more relevant than ever.
Founded in 2004, Pluralsight has matured into a prominent player in the online upskilling industry. The company has seen significant growth in recent years, capitalising on the surge in demand before many competing startups emerged. Despite facing competition from major players like Grow with Google and Udemy, Pluralsight has maintained its strong position.
Though Vista Equity Partners' 2021 acquisition has brought some challenges, Pluralsight, once a unicorn startup now a public company, continues to thrive. With numerous partnerships with NGOs, educational institutions, and corporations, Pluralsight remains a key player in tackling the tech skills shortage.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-11% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Dec 2016
$30m
SERIES C
Aug 2014
$135m
SERIES B
Total funding: $195m
Company benefits
- Unlimited PTO
- Summer Fridays
- Holidays
- Parental Leave
- Medical, Dental and Vision
Company HQ
Draper, UT
Leadership
Aaron Skonnard
(Co-Founder & CEO)Worked as a DevelopMentor Author, and was President of Skonnard Consulting. In 2004, left a Neumont University Associate Professorship to co-found Pluralsight.
Fritz Onion
(Co-Founder & Content Advisor)Started as an Oracle Software Engineer after a degree at Harvard, and then spent 10 years as a DevelopMentor Instructor. Subsequently co-founded Pluralsight in April 2004, serving as Content Advisor.
Share this job
View 20 more jobs at Pluralsight