Security Engineer

Job Description

Responsibilities

As a Security Engineer, you will join our exceptional security team tasked with building world-class security into our product offerings by working on security operations, maintaining and improving our monitoring and alerting stack, participating in on-call and responding to security incidents, application security testing, bug bounty programs, and security reviews for both application and infrastructure security. You will proactively improve the security of our codebase, product, cloud, and customers’ on-premise deployments. This is a generalist role where you will be primarily focused on Security Operations, but will also work across all facets of a security program.

Within one month, you will…

• Be onboarded to our alerting and monitoring stack
• Be able to participate in on-call rotations
• You will discover, fix, and mitigate infrastructure vulnerabilities by updating libraries, base images, and analyzing containers

Within three months, you will…

• Maintain internal systems, such as automations that assist in alert triaging
• You will work with other teams to triage, troubleshoot, and mitigate customer concerns and questions about our security
• You will enhance our application security with audits, best practices, code fixes, and continuous education
• You will perform reactive incident response if a security event occurs
• You and your manager will work together on a career plan with actionable goals

Within six months, you will…

• You will perform proactive research to detect new attack vectors
• You will perform threat modeling for existing and future applications 
• You will assess and integrate new tools and technologies to improve our operational efficiencies
• You will help maintain compliance with SOC 2, ISO 27001 & GDPR standards

About you 

Equal parts engineer and security professional, you are excited about joining a team that is building a world-class security system trusted by some of the biggest tech companies in the world.  You and your teammates are Sourcegraph’s first line of defense against bad actors using all the newest and dirtiest tricks to hack us and (more importantly) our customers.  You want to be a part of the foundational team, the first steps we are taking to build something big, something trusted, something critical to software and our customers

Your skill-set:

• Practical experience reviewing SIEM alerts and participating in on-call rotations
• Practical experience securing SaaS applications as a security generalist, including infrastructure security, application security, and/or compliance
• Experience with Go, including writing and maintaining internal tooling along with code reviews
• Experience with Elastic stack and GCP
• Experience using and automating a wide range of defensive security tools
• Experience working across engineering teams to secure projects across the organization.
• You are high agency
• You communicate effectively in writing and documentation

Nice to haves:

• Experience developing software as an engineer (i.e., writing code and contributing directly to applications)
• Experience working in a startup environment
• Experience with TypeScript and Terraform
• Experience with Kubernetes
• Experience securing AI products

Are you interested in this position?
Apply by clicking on the “Apply Now” button below!
#GraphicDesignJobsOnline
#WebDesignRemoteJobs
#FreelanceGraphicDesigner
#WorkFromHomeDesignJobs
#OnlineWebDesignWork
#RemoteDesignOpportunities
#HireGraphicDesigners
#DigitalDesignCareers
# Dynamicbrand guru