Security Engineer, 6sense

• 3-5 years of experience in information security, with a focus on cloud security, infrastructure security, security engineering, or SRE
• Familiarity with AWS security controls, monitoring, and orchestration (SCPs, Guard Duty, Config, Macie, etc.)
• Working knowledge of network security, WAF, DDoS mitigation, authentication, encryption, and vulnerability management
• Working knowledge of CI/CD, Kubernetes, IaC, and serverless technologies
• In-depth knowledge of at least one major cloud platform (e.g., AWS, GCP) and their native security services preferably AWS
• Working knowledge of IAM, WAF, GuardDuty, SecurityHub, EC2, SSO, KMS, AWS Organizations
• Understanding of security principles, including threat modeling, risk assessment, and incident response
• Proficiency in networking concepts, protocols (TCP/IP, HTTP, DNS), and network security (firewalls, VPNs, intrusion detection)
• Hands-on in scripting languages (Python, Bash) for automation and security tasks
• Familiarity with security tools like vulnerability scanners, intrusion detection systems, and SIEM solutions
• Understandings of DevOps/DevSecOps practices, CI/CD pipelines, and IaC tools
• Excellent communication skills, including verbal, written, and presentation skills, and ability to appropriately address audience in communications
• Translates technical requirements into actionable and timebound requests
• Maintains accuracy of information
• Effective prioritization and escalation to management

Desirable

• As members of 6sense’s Security department, the Security Engineering team protects the platform and ensures that the product is secure. Infrastructure Security Engineers partner with infrastructure, platform, and engineering teams to identify and mitigate cloud security risks
• Operate CNAPP tool to facilitate Infrastructure security vulnerability management processes
• Conduct cloud security assessments and implement remediation strategies
• Advise infrastructure teams on cloud security standards and hardening activities
• Perform vulnerability assessments of golden AMIs
• Ensure the security logging standard is adopted and followed
• Provide logging and monitoring support to Security Operations
• Leverage scripting skills to automate tasks, integrate tools, and build workflows
• Support risk assessment, compliance, and other security department initiatives
• Design and execute quarterly (O)KRs
• Understands the 6sense product and platform basics
• Participates in weekly 1:1s with manager and monthly skip levels
• Implements security controls considering the latest security threats, trends, and best practices to ensure that 6sense's security posture remains effective and efficient
• Manages vulnerabilities with CVEs to remediation within targeted SLA or risk acceptance
• Maintains inventory of security scope and coverage for 6sense product(s)
• Maintains up to date collateral, metrics and processes