EverCommerce - Senior Security Engineer

EverCommerce

2d • $130,000 - $160,000 • Remote

About The Position

At EverCommerce [Nasdaq: EVCM], we are on a mission to digitally transform the service economy with tailored, end-to-end SaaS solutions that simplify and empower the lives of our 725,000+ customers. As a leading service commerce platform, our modern digital and mobile applications create predictable, informed, and convenient experiences between customers and their service professionals in the areas of Home & Field Services, Health Services, and Wellness industries. We are building an extraordinary company and looking for talented, energetic, and motivated people to join our team. You can learn more about our Company, Culture and Values here: https://careers.evercommerce.com/us/en We are looking for a Senior Security Engineer to help us build and grow our EverCommerce security program. designs, builds, deploys, integrates, and optimizes security solutions and processes. The Senior Security Engineer will have well-developed communication skills and can demonstrate proven technical ability, refined relationship management skills, and problem-solving skills. We are seeking an individual with a diverse background and that includes aptitude across several technologies, and skill sets. This role will require close coordination with other information security engineers, teams, security stakeholders and with internal and external software development teams.

Requirements

• At least 7 years of relevant work experience in a technical field (e.g. cybersecurity, software development, or systems administration)
• Bachelor's Degree in a technical discipline such as Cyber Security, Information Technology, Computer Science, or Information Systems - or equivalent professional experience
• Have at least one current Industry recognized security certifications; CISSP, CISM, CISA, GIAC or commensurate experience
• Excellent communication and interpersonal skills, with the ability to communicate and collaborate effectively with cross-functional teams, matrixed organizations, and technical / and non-technical stakeholders
• Demonstrated experience with the security, development and/or management of systems compliant to NIST 800-53, NIST CSF, or ISO 27001-2022 security control frameworks
• Exceptional knowledge and understanding on the creation/implementation and securing of cloud technologies such AWS and Azure
• Knowledge of Information Security risk assessment methodologies and standards
• Highly flexible, self-motivated and eager to learn, with a strong passion for cyber security
• Excellent verbal and written English communication skills

Nice To Haves

• Advanced knowledge regarding common attacks, attack methods, and defense architectures.
• Experience in securing multi-tenant compute services, microservices and modern APIs
• Working knowledge of common web and container-based vulnerabilities
• Experience with Information Security policies and procedure development and implementation
• Experience developing technical documentation, including reports, proposals, statements of work, and whitepapers

Responsibilities

• Create and maintain security architecture and engineering processes and procedures
• Design of system architectures which meet established cybersecurity requirements and align with customer needs This includes security requirements definition, documentation, and communication.
• Development of security architecture requirements and implementation guidance based on analysis of NIST 800-53 and or other security control frameworks
• Architect, design, implement, maintain, and operates information system security controls and countermeasures.
• Provides techniques and patterns for securing integration with external security system vendors and/or cloud providers
• Leads regular architecture and design reviews to ensure requirements implementation
• Evaluates and plays an active role in life-cycle management of multiple security technologies
• Identify security risks and control gaps within systems, designs, products, data flows, and processes; and recommend corrective architecture, integrations, controls, and operations
• Participate in the development of security requirements, architectures, and documentation to ensure security controls are seamlessly integrated into new technology deployments
• Perform secure architecture and design reviews of new technology and security systems deployments, and collaborate with business teams to integrate secure-by-design principles into CI/CD pipelinbes and Agile development processes
• Maintain a clear view of the overall security architecture roadmap and strategic plan
• Leverage emerging technologies and advanced security practices to ensure EverCommerce is at the forefront of security for our solution groups and our customers
• Build, maintain and mature security architecture metrics and reporting
• Serve as a subject matter expert/contributor measurably improving the overall security framework and program
• Mentor junior security engineers and analysts
• Additional duties as required and assigned

Benefits

• Continued investment in your professional development
• Day 1 access to a robust health and wellness benefits package, including an annual wellness stipend.
• 401k with up to a 4% match and immediate vesting
• Flexible and generous (FTO) time-off
• Employee Stock Purchase Program

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level