Security Engineer
ezCater
full-time
Posted on:
Location Type: Remote
Location: Remote • Massachusetts • 🇺🇸 United States
Visit company websiteSalary
💰 $113,000 - $137,000 per year
Job Level
Mid-LevelSenior
Tech Stack
GoPythonRuby
About the role
- Collaborate with Technology and Product teams to conduct security assessments, ensuring code and infrastructure changes align with SOC 2, PCI-DSS, and internal policies.
- Automate compliance and control activities such as risk assessments, vulnerability scanning, third party risk management, and control validation.
- Create monitoring and detective alerts for security operations, non-compliance, and incident response.
- Responsible for maintaining a healthy posture of our security tools and automations.
- Provide support for third-party assessments from customers and audit evidence collection and review.
- Expand beyond purely identifying gaps and risks, and own the design and implementation of monitoring and remediating them.
- Span across multiple security domains, you’ll be able to flex into technical and non-technical roles to drive risk detective and mitigative projects.
Requirements
- Experience with development and scripting languages (Ruby, Go, Python) and leveraging API’s to automate workflows.
- Articulate about risk management and compliance controls relating to industry best practices and frameworks.
- Experience performing and remediating risk and control gap assessments.
- Knowledge of Governance, Risk & Compliance (GRC) frameworks, Security Operations Center (SOC) processes, IT Security protocols, and privacy practices.
- Someone who is willing to challenge the existing norms and “Aim Higher, Make it Better” than the way it currently is.
- A continuous learning mindset to stay current with the latest security trends, threats, and technologies.
Benefits
- Market competitive salary
- Stock options
- 12 paid holidays
- Flexible PTO
- 401K with ezCater match
- Health/dental/FSA
- Long-term disability insurance
- Mental health and family planning resources
- Remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office
- A tremendous amount of responsibility and autonomy
- Wicked awesome co-workers
- Relish (and many more goodies) when you’re in our office
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
RubyGoPythonAPI automationrisk assessmentsvulnerability scanningthird party risk managementcontrol validationmonitoring alertsincident response
Soft skills
risk managementcompliance controlsarticulationcontinuous learning mindsetchallenging normsproblem-solvingcollaborationadaptabilitycommunicationownership