Synack, Inc.

Backend Engineer

• Develop and integrate cybersecurity testing and analysis systems with best-in-class cybersecurity platform
• Build high-performance, resilient, scalable cloud-based software, utilizing AI technologies, microservices architecture and containers
• Take software through CI/CD all the way to production and own its quality and availability
• Utilize GCP platform to build and run highly-available software systems
• Identify and resolve performance issues across systems and components
• Collaborate on a cross-functional team, working with Product, Operations, and DevOps
• Integrate monitoring and alerting capabilities with backend modules to allow proactive improvements to availability and response times
• Design, implement and deliver well-tested, scalable, highly available systems
• Own and ideate technical solutions for product requirements and user stories
• Actively engage and participate in design and code reviews
• Offer guidance and support to junior team members, encouraging and cultivating a culture of continuous learning within the team
• Ensure Synack's security and privacy posture is maintained

Senior Software Engineer, Backend

Security Engineer

• Maintain System Security Plans (SSP), including Security Concept of Operations, Risk Management Matrix, Security Control Traceability Matrix, and conduct Security Impact Analysis (SIA) on major system changes
• Develop and maintain automated Plans of Action and Milestones (POAMs)
• Contribute to the adoption and implementation of automation and use of Artificial Intelligence (AI) within Synack's Information Security operations
• Conduct internal information security audits around ISO 27001/2, SOC2, CMMC and FedRAMP security controls
• Communicate regularly with stakeholders on security compliance issues aligning to CIS and NIST standards, track mitigation/remediation tasks, and assist in generation of reports and metrics
• Manage and track remediation of identified risks and vulnerabilities and provide appropriate reporting to all interested parties
• Work collaboratively with Project Managers and Software Engineers to ensure appropriate information security policies, standards, procedures, and guidelines are incorporated across Synack hosted services and infrastructure, focusing on hardening and DevSecOps principles
• Coordinate with field teams to respond to vendor security assessments and conduct 3rd party risk assessments of Synack vendors

Information Security Manager

DevOps Engineer

• Leverage extensive knowledge and understanding across multiple infrastructure software automation projects and CI/CD pipelines while partnering with Engineering, Product Management, InfoSec, and QA to define and execute against technical designs following industry best practices
• Work as a member of feature teams to deliver on the infrastructure portion of the product
• Predict and deliver improvements across a diverse scope to our automated infrastructure components within an DevSecOps methodology
• Enhance monitoring and alerting across the Synack production application while creating new alerts and responding to issues as needed
• Tune automation to overcome systems performance and stability issues and devise solutions based on limited information and precedent to resolve issues
• Create automated tests around our infrastructure suite to improve reliability
• Work closely with Engineering teams to ensure proper software support, monitoring, and security policies