Security Engineer, Contentful
+ Stock options
Content management platform
Be an early applicant
Content management platform
501-1000 employees
Be an early applicant
+ Stock options
501-1000 employees
Company mission
To modernize how content flows by leading the transition from legacy CMS to content infrastructure.
Role
Who you are
- Candidates should be skilled in cloud-native technologies with demonstrable proficiency in infrastructure as code and application development
- 4+ years of security engineering, DevSecOps, or equivalent experience
- Hands-on expertise with AWS architecture, services, and security features
- Proficiency in Python to build and maintain security tools.
- Familiarity with Kubernetes and container security, including configuration and runtime protection
- Exposure to Javascript and Go with the ability to perform security code reviews
- Experience using Terraform to build, deploy, and maintain infrastructure as code
- Strong foundational networking knowledge covering cloud networking concepts, OSI model, TCP/IP, and routing fundamentals
- Demonstrable ability to embed security considerations throughout the software development lifecycle
- Hands-on involvement supporting vulnerability management and incident response functions
- Familiarity with authentication and authorization protocols and mechanisms (OAuth, SAML, JWT, IAM)
- Experience identifying and mitigating OWASP Top 10 vulnerabilities in web applications and APIs
- Clear and effective communication skills
- Ability to articulate security risks and tradeoffs to both technical and semi-technical audiences
- A proactive, growth-oriented mindset focused on continuous learning, innovation, and raising security standards
- Passion designing and performing hands-on implementation work
- Ability to work in a fast-paced environment, often juggling multiple projects
What the job involves
- We are looking for a committed and driven Security Engineer with experience working in cloud-native product infrastructure and corporate environments
- In this role, you will manage daily alerts and operations while leading broader collaborative initiatives such as architecture design collaboration, threat modeling, and vulnerability identification, to drive meaningful security improvements
- This hands-on role offers an opportunity to grow your expertise in cloud technologies and security tooling while making meaningful impact by embedding security practices and supporting secure third-party integrations in a fast-pacted software-as-a-service environment
- Lead initiatives and partner with teams to embed practical security safeguards and champion a security-first mindset across the business
- Lead security assessments and remediation for cloud-native applications, infrastructure, and vendor integrations to proactively identify and address risk
- Support vulnerability management by identifying, tracking, and partnering with teams to drive remediation of security issues across product and corporate environments
- Develop and maintain security solutions through custom development and effective tool management to enhance efficiency and operational effectiveness
- Leverage industry standards to develop hardening requirements and monitoring mechanisms that enforce and strengthen security of systems and environments
- Advance the development, customization, and maintenance of hardening standards, and monitoring mechanisms for systems and environments
- Drive security and monitoring enhancements to containerized workloads and orchestration platforms
- Participate actively in incident investigations through independent analysis, contributing to findings, root cause analysis, and remediation efforts
- Collaborate in defining and monitoring evolving security compliance and regulatory requirements
- Research and evaluate emerging threats, vulnerabilities, and security technologies to keep defenses up to date
Our take
Creating, distributing and managing digital content can be complex, time-consuming and difficult, especially at scale. Contentful solves this problem by centralizing all content management into one API-based system.
Since founding in 2013, Contentful has grown to become one of the largest companies of its kind. It now serves thousands of customers, many of which are enterprises such as Danone and Bang & Olufsen. Importantly, the company has continued to improve its offering, for example by partnering with eSSENTIAL Accessibility to offer a way for users to achieve ADA compliance.
In recent years, Contentful has grown its executive team, attracting top talent from companies like Zendesk and Atlassian which has helped to accelerate its ambitious growth strategy. It has also expanded its relationship with AWS, launching the Contentful Composable Content Platform in AWS Marketplace, a key move that will help to broaden its reach and ensure it remains a key player in the competitive CMS market.
Freddie
Company Specialist at Welcome to the Jungle
Insights
10% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jul 2021
$175m
SERIES F
Jun 2020
$80m
SERIES E
Total funding: $336.7m
Company benefits
- Full-time employees receive Stock Options for the opportunity to share in the success of our company
- Generous amount of paid time off, including vacation days, education days, and volunteer days
- Use your personal education budget to improve your skills and grow in your career
- Enjoy a full range of virtual events, including workshops, guest speakers, and fun team activities, supporting learning and networking exchange beyond the usual work duties
- Use your physical fitness budget to get away from your desk and support your physical wellness
- A monthly phone/internet stipend and phone upgrade reimbursement after 2 years
- Plus, Contentful socks! And other amazing swag as part of company events. Oh yeah!
- Access to our Employee Assistance Program (EAP) for information, support, discussion, and counseling for life’s challenges
Company values
- Be humble - We are not centered on ourselves, but focus on the needs and contributions of others around them
- Embody a growth mindset - We believe in our collective potential to develop and evolve through dedication and continuous learning
- Start with the customer and work backwards - The first question we ask is “What customer need does this solve?” and treats each customer with empathy
- Strive together - Creating anything of significance without collaboration is challenging, so we work hard together to make an impact
Company HQ
Denver, Colorado, United States
Articles
Leadership
Paolo Negri
(CTO)Previously worked as Senior Developer at AutoScout24, and Senior Developer Team Lead at Wooga.
Sascha Konietzke
(CSO & Board Member)Previously worked as EMEA Manager at Hewlett-Packard, and founded a range of companies including angel investment firm Ko9.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 81 more jobs at Contentful