Learn about our users, systems, and security posture, and how security enables our product and business goals.
Support security assessments of code and infrastructure changes with guidance from Security Engineers, helping ensure alignment with SOC 2, PCI-DSS, and internal policies.
Assist with automating recurring security and compliance activities such as vulnerability scanning, risk assessments, third-party risk reviews, and control validation.
Help create and tune monitoring and detective alerts for security operations, non-compliance, and incident response, using our security tools and dashboards.
Contribute to maintaining a healthy posture of our security tools and automations by helping with configuration, troubleshooting, and documentation.
Assist with collecting, organizing, and reviewing audit evidence for SOC 2
Participate in security incident response exercises and post-incident reviews, learning how we investigate and mitigate security events.
Collaborate with partners across Technology, Product, Analytics, and IT to support small, scoped projects that reduce risk and improve our security posture.
Have fun building meaningful, pragmatic security solutions with kind and smart people.

Requirements

Currently pursuing a degree in Computer Science, Information Security, Information Systems, or a related field, or equivalent practical experience.
Familiarity (through coursework, projects, or self-study) with one or more of: security engineering, cloud platforms, networking, or operating systems.
Some experience with at least one programming or scripting language (e.g., Python, Go, Ruby, JavaScript) and an interest in leveraging APIs to automate workflows.
Interest in risk management and compliance frameworks (e.g., SOC 2, PCI-DSS) and how they translate into technical and operational controls.
Comfort gathering and analyzing data, and summarizing findings clearly for both technical and non-technical audiences.
Strong written and verbal communication skills, with the ability to present your work and recommendations to a variety of stakeholders.
A collaborative, curious, and pragmatic mindset — you enjoy asking questions, learning from others, and iterating based on feedback.
A continuous learning mindset to stay current with the latest security trends, threats, and technologies.
Soft skills that are as well developed as your technical skills, and a willingness to challenge existing norms and help make things better than they are today.

Benefits

Market competitive salary
Stock options that you’ll help make worth a lot
12 paid holidays
Flexible PTO
401K with ezCater match
Health, dental, FSA
Long-term disability insurance
Mental health and family planning resources
Remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office
A tremendous amount of responsibility and autonomy
Wicked awesome co-workers
Relish (and many more goodies) when you’re in our office

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security engineeringcloud platformsnetworkingoperating systemsPythonGoRubyJavaScriptAPIsvulnerability scanning

Soft Skills

written communicationverbal communicationcollaborationcuriositypragmatismdata analysispresentation skillscontinuous learningproblem-solvingfeedback iteration