Side Hustles

Side Hustles For All

Salary Unstated

Security Engineer, Product Security

Apply Now
Full-time Remote 9d ago

Company:

Cape was founded in early 2022 by Palantir and Anduril alums focused on privacy and national security.

Summary:

The applicant will focus on improving cloud and application security to minimize risks across AWS and mobile infrastructures. A bachelor's degree in a related field and significant experience in information security, specifically with AWS, are required for this role.

Requirements:

Technology: AWS, Terraform, AWS CloudFormation, Amazon GuardDuty, Amazon Inspector, AWS IAM, AWS KMS, AWS WAF, AWS Shield

Hard Skills: Designing security controls, Conducting security assessments, Integrating security practices into DevOps, Utilizing AWS security tools, Running penetration tests

Credentials: Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience), Advanced degrees or certifications (e.g., CISSP, AWS Certified Security Specialty) are advantageous.

Experience: A minimum of 5 years of experience in information security, with at least 3 years concentrated on cloud security within AWS environments.

Job Description:

We are seeking an experienced Security Engineer with a specialization in product security to join our team. As a strategic partner, you will make an immediate impact by leveraging your expertise in cloud and application security. This role is pivotal in reducing risk across our AWS cloud environments, mobile core infrastructure, and mobile applications. You will be responsible for designing, implementing, and maintaining security measures that comply with regulatory standards, enhance internal processes, and minimize data security risks. Through developing ongoing security strategies and technologies, you will support the organization's business objectives and daily operations.

Responsibilities

  • Design, implement, and manage robust security controls and policies within AWS, focusing on the confidentiality, integrity, and availability of data and services.

  • Perform comprehensive security assessments of our cloud environments to identify vulnerabilities, assess risks, and recommend actionable mitigation strategies.

  • Lead the integration of security practices into the DevOps lifecycle, promoting secure development, deployment, and operational processes.

  • Utilize and optimize AWS security tools (such as Amazon GuardDuty, Amazon Inspector, AWS IAM, AWS KMS, AWS WAF, and AWS Shield) and explore third-party solutions to bolster our security posture.

  • Assist in running and address findings from penetration tests and security audits, and ensuring prompt and effective remediation.

  • Stay informed about the latest security threats, vulnerabilities, and compliance mandates affecting cloud environments, provide strategic guidance on technologies and best practices.

  • Provide expert mentorship to junior security team members and engineers across the company, to foster an organizational culture of security awareness and continuous improvement.

  • Collaborate with stakeholders to integrate security requirements effectively into engineering projects and broader business initiatives.

Preferred Experience

  • A minimum of 5 years of experience in information security, with at least 3 years concentrated on cloud security within AWS environments.

  • Deep understanding of AWS architecture, security services, and best practices for securing cloud applications and data.

  • Proficiency in using infrastructure as code (IaC) tools (like Terraform or AWS CloudFormation) and in automating security tasks within AWS.

  • Skilled in scripting languages (Python, TypeScript, Go) for the automation of security tasks and the integration of security tools.

  • Familiarity with containerization and microservices, particularly in securing stacks using these technologies.

  • Solid knowledge of network security, encryption technologies, and secure coding practices.

  • Excellent analytical skills for identifying and mitigating complex security vulnerabilities and risks.

  • Strong communication and leadership abilities, capable of working collaboratively across teams and effectively conveying technical information to non-technical stakeholders.

  • Organized and able to manage multiple priorities in a dynamic, fast-paced environment.