Staff Cloud Security Engineer
World - San Francisco, CA
posted about 1 month ago
About the position
Worldcoin is launching a network built on privacy-preserving proof-of-human technology, and this opportunity is with Tools for Humanity. The role involves working with the Orb, an advanced biometric imaging device designed for Worldcoin's launch. The Orb is used to onboard new Worldcoin users by generating an encoding of each user's iris and submitting it to Worldcoin's backend. The position requires addressing engineering and UX challenges related to image quality, security, and ease-of-use, while ensuring the device can operate in various lighting conditions and insecure environments. The security team plays a crucial role in ensuring fairness, building trust, and preventing fraud while interfacing with various teams across the company.
Responsibilities
- Be responsible for the architecture and ongoing hardening of access control and identity systems.
- Take ownership of device trust for user workstations.
- Develop and maintain DLP and email security posture.
- Partner with IT to deliver world class security solutions.
- Develop and enforce data loss prevention strategies to safeguard organizational data.
- Perform security audits on business applications and in-house systems, driving improvements where needed.
- Develop and deliver security training and awareness programs for staff.
- Implement and maintain endpoint security solutions and strategies to safeguard against unauthorized access, malware and data leaks.
Requirements
- Hands-on mastery of endpoint security solutions, including but not limited to, EDR, MDM platforms, zero trust, endpoint hardening.
- Experience with securing/hardening user workstations.
- Developed company wide DLP.
- Experience evaluating and maintaining security state of SAAS tooling.
- Extensive experience with IAM platforms, with a proven track record in auditing, hardening, and architecting security solutions, including the implementation of device trust frameworks.
- Proficient in creating and executing security audits on business applications and internal systems, with the ability to drive actionable improvements based on audit findings.
- A strong advocate for security awareness, capable of designing and leading internal programs to elevate organizational security consciousness.
- 7+ years of hands-on experience in Enterprise Security Engineering or closely related roles.
Nice-to-haves
- Previous experience in leading threat-hunting initiatives or incident response simulations.
- Development of hardened machine images.
- Experience with hardening office networks.
- Demonstrable scripting skills in languages like Python, Bash, or Go to automate tasks and develop custom tooling.
- Experience in leading or mentoring less experienced team members in the realm of security operations.
- Experience with regulatory compliance standards such as SOC 2, ISO 27001 or GDPR.
- A portfolio of public talks, blogs, or research papers on relevant security topics is a plus.
Benefits
- Healthcare
- Dental
- Vision
- 401(k) plan and match
- Life insurance
- Flexible time off
- Commuter benefits
- Professional development stipend
- Competitive long term incentive package
