Security Engineer, Fieldwire

• Bachelor's degree in Cloud/Network Security, Computer Science, or equivalent experience
• 4+ years of experience as a Security Engineer
• Proficient in one or more programming languages such as Python, Ruby or Rust
• Experience with cloud services such as AWS, Azure, or GCP
• Experience implementing detective controls and security processes like static and dynamic code analysis
• Experience with vulnerability management remediation
• Strong knowledge of security best practices, standards, and frameworks

Desirable

• You’ll be joining an impactful team of highly skilled engineers who are building the core platform features and services to fuel our rapidly growing company
• As a team, we are always working to continuously improve both our product and our craft
• The Engineering team will focus on developing world-class services and integrations, all the while ensuring to keep our apps secure, high-performing, and most importantly scalable
• As a Security Engineer, you’ll focus on the building, deployment and maintenance of multi-cloud security controls, maintain and help implement security program initiatives, and further our compliance standards
• You will work with our security team to engineer automated security processes and help improve our overall security posture for our cloud based applications and systems across Fieldwire
• Implement essential security projects
• Help maintain a Vulnerability Management program
• Help define and evangelize requirements and guidance for security best practices
• Participate in security incident management, evaluation, assessment, and testing for vulnerabilities across web and mobile applications as well as cloud infrastructure and internal networks
• Provide information and vulnerability notices to the team from Threat Hunting
• Collaborate with product and engineering teams to improve security visibility, monitoring, hardening, and operational response
• Manage and configure security controls on endpoint solutions such as GSuite, SSO, Data Loss Prevention, and firewalls
• Routinely manage engagements such as tabletop, red team exercises, or bug bounties