Security Engineer

Fieldwire

2h • Remote

About The Position

You’ll be joining an impactful team of highly skilled engineers who are building the core platform features and services to fuel our rapidly growing company! As a team, we are always working to continuously improve both our product and our craft. The Engineering team will focus on developing world-class services and integrations, all the while ensuring to keep our apps secure, high-performing, and most importantly scalable.
As a Security Engineer, you’ll focus on the building, deployment and maintenance of multi-cloud security controls, maintain and help implement security program initiatives, and further our compliance standards. You will work with our security team to engineer automated security processes and help improve our overall security posture for our cloud based applications and systems across Fieldwire.

Requirements

• Bachelor's degree in Cloud/Network Security, Computer Science, or equivalent experience.
• 4+ years of experience as a Security Engineer.
• Proficient in one or more programming languages such as Python, Ruby or Rust.
• Experience with cloud services such as AWS, Azure, or GCP.
• Experience implementing detective controls and security processes like static and dynamic code analysis.
• Experience with vulnerability management remediation
• Strong knowledge of security best practices, standards, and frameworks.

Nice To Haves

• Management of audits and security standards such as ISO 27001 and SOC 2.
• Knowledge of requirements such as data residency and GDPR.
• Experience in offensive security engagements like pentesting.
• Familiarity with static code analysis and/or fuzz testing.
• Experience with AWS security and tools such as Inspector, Detective, GuardDuty, and WAF.

Responsibilities

• Implement essential security projects.
• Help maintain a Vulnerability Management program
• Help define and evangelize requirements and guidance for security best practices.
• Participate in security incident management, evaluation, assessment, and testing for vulnerabilities across web and mobile applications as well as cloud infrastructure and internal networks.
• Provide information and vulnerability notices to the team from Threat Hunting.
• Collaborate with product and engineering teams to improve security visibility, monitoring, hardening, and operational response.
• Manage and configure security controls on endpoint solutions such as GSuite, SSO, Data Loss Prevention, and firewalls.
• Routinely manage engagements such as tabletop, red team exercises, or bug bounties.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 101-250 employees