Lead Security Engineer
New
P
PipeCybersecurity
Source API remote eligibility restrictions: Anguilla, Antigua and Barbuda, Aruba, Bahamas, Barbados, Belize, Bermuda, Bonaire, Sint Eustatius and Saba, Canada, Cayman Islands, Costa Rica, Cuba, Curaçao, Dominica, Dominican Republic, El Salvador, Greenland, Grenada, Guadeloupe, Guatemala, Haiti, Honduras, Jamaica, Martinique, Mexico, Montserrat, Nicaragua, Panama, Puerto Rico, Saint Barthélemy, Saint Kitts and Nevis, Saint Lucia, Saint Martin (French part), Saint Pierre and Miquelon, Saint Vincent and the Grenadines, Sint Maarten (Dutch part), Trinidad and Tobago, Turks and Caicos Islands, United States, United States Minor Outlying Islands, Virgin Islands, British, Virgin Islands, U.S.Full-TimeLead
Salary150,000 - 220,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Required Skills
- PythonGCPTypeScriptGo
Requirements
- Have hands-on experience with cloud platforms; GCP is preferred.
- Have experience with Kubernetes security.
- Be proficient in at least one of Go, Python, or TypeScript to build and maintain internal tooling.
- Have owned SOC 2 or equivalent compliance programs end-to-end, including evidence collection, auditor management, and remediation.
- Have experience running incident response, including on-call, post-mortems, and tabletop exercises.
- Have experience managing vendor risk reviews.
- Have experience responding to customer security questionnaires.
- Have strong written communication for work with auditors, customers, partners, and engineers.
Responsibilities
- Review and help design security standards and monitoring.
- Maintain and improve the policy-as-code platform for detection and response.
- Work with Infrastructure to monitor cloud deployments and ensure they follow security policies.
- Manage SOC 2 audits and ensure compliant software and processes.
- Participate in the on-call rotation and respond to critical security issues.
- Own the vulnerability disclosure program and triage incoming reports.
- Run tabletop exercises and incident response drills.
- Maintain security policies and lead recurring reviews, including firewall changes and security reviews.
- Lead responses to partner and customer security questionnaires.
- Maintain the security risk register, track remediation, and produce periodic security metrics for leadership.
View Full Description & ApplyYou'll be redirected to the employer's site
