Security Engineer
Bilt Rewards - New York City, NY
posted 2 days ago
About the position
Bilt Rewards is the first program for consumers to earn rewards on rent and daily neighborhood spend while creating a path towards home ownership. With an alliance of the nation's largest real estate owners, Bilt Rewards enables renters in more than three million units across the country to earn points just by paying rent. Bilt Rewards boasts one of the highest value rewards programs on the market today, including one-to-one point transfers to twelve loyalty programs allowing members to travel across more than 100 major airlines and hotel partners; fitness classes at the country's top boutique studios; limited-edition and exclusive collections of art and home decor through the Bilt Collection, and the ability to use points for rent credits or towards a future downpayment. Bilt has also partnered with Mastercard to create the Bilt Mastercard - the first and only credit card that can be used to pay rent with no fees.
Responsibilities
- Develop and run tools to gather security signals from production services.
- Automate workflows and improve identification and response time for security events.
- Build and optimize security detection rules for production infrastructure and services.
- Respond to security events, triage, perform investigations, incident analysis, and communicate clearly and efficiently to stakeholders.
- Partner with the engineering team on internal and customer-facing security and privacy initiatives while ensuring secure data accessibility, quality, and reliability are considered.
- Work closely with the engineering and IT team to document the security architecture, review non-security process workflows, and threat model against both.
- Interact with all Bilt employees and contractors for incident response followups, containment, security awareness education, tabletops and trainings.
- Contribute to refining Bilt Rewards' policies, guidelines, and procedures about protecting information assets, and presenting those policies Bilt-wide when appropriate.
- Work closely with various departments of the organization to lead and participate in security operations, vulnerability management, risk assessments, and project maintenance.
- Remain updated on common, bleeding-edge security incidents affecting the industry and ensure Bilt remains properly protected from them.
Requirements
- 2+ years with GCP or 4+ years with AWS/Azure experience
- Hands-on experience with data analysis, modeling, and correlation at scale.
- Experience developing tools and automation using common DevOps/DevSecOps toolsets and programming languages.
- Ability to analyze endpoint, network, and application logs for anomalous events.
- Operating systems internals and forensics experience for macOS, Windows & Linux.
- A sense of helpfulness towards the less technical, dedication towards the Bilt mission and a critical-thinking mindset often needed in InfoSec.
Nice-to-haves
- BurpSuite, BigQuery, Java, GitHub admin experiences a big plus
- AppSec Engineers with Incident Response experience
- T2 Incident Responders with forensic/containment experience in Google Cloud Platform (GCP), Data Loss Protection (DLP)
- Purple-teamers with experience applying their own remediations successfully in client environments
- Detection/Rules engineers with track record of successful workflow automations
- Security Researchers/Threat Hunters who specialize in Cloud (GCP), Web/Mobile apps, and/or DLP
- Someone with a blend of action-oriented, automation-focused incident response and AppSec experience (2+ years)
Benefits
- Competitive salary with a meaningful stake in the company via equity and performance bonus program
- Health insurance for you (& your loved ones) from day one
- 401k plan with a match
- Commuter FSAs
- UNLIMITED PTO
- Exclusive Employee only Bilt Points
- Team Events
