1+ months

Sr. Security Engineer - 1052359

New York, NY 10007
  • Job Code
    1052359
\u003Ch3\u003E\u003Cstrong\u003ESummary\u003C/strong\u003E\u003C/h3\u003E \u003Cp\u003EJoin our expanding team of security experts in our mission to become an elite security team dealing with 2021\u2019s problems. Bring your creativity and passion for sec-ops or sec-eng in a meaningful way to have real impact in the future of millions of people\u0027s experience and interaction with work by experimenting with the latest in cyberspace.\u003C/p\u003E \u003Cp\u003EIf you are the kind of person who thrives in a challenging environment with creative expertise and a thirst for pushing the limits, we are interested in you!\u003C/p\u003E \u003Cp data-rte-preserve-empty=\u0022true\u0022\u003E\u00A0\u003C/p\u003E \u003Ch3\u003E\u003Cstrong\u003EWhy apply?\u003C/strong\u003E\u003C/h3\u003E \u003Cp\u003EOur Engineers get to work with the most progressive technologies in the business. We utilize Docker containers, k8s, Node.js, Go, microservices, and more. Our infrastructure leverages orchestrated containers, spans a CI/CD pipeline, is all IaC, and in the cloud.\u003C/p\u003E \u003Cp\u003EBeing at the bleeding edge of innovation comes with its own security challenges that books have not covered yet. \u00A0If an exploit in the news drives you to find the write up or paper that explains how it worked, you\u2019re sick of waiting for your company to \u201Cget around\u201D to patching vulnerabilities, and you want to help build a secure foundation for our platform engineers, give us a call.\u003C/p\u003E \u003Cp\u003EIf you like to sweat the details of how to recover a system from scratch, have experience in release management, worry about deploying certificates correctly, and want to own the management of security tools and infrastructure, this is your chance.\u003C/p\u003E \u003Cp\u003E\u00A0\u003C/p\u003E \u003Ch3\u003E\u003Cstrong\u003EYour responsibilities \u003C/strong\u003E\u003C/h3\u003E \u003Cp\u003EAt Lifion, we are building a culture of rigorous code review and formal application security design, that lets us catch vulnerabilities during development and not after. You should be familiar with the OWASP top ten, and be able to speak to them to bring Platform Engineers up to speed.\u003C/p\u003E \u003Ch3\u003E\u003Cstrong\u003EPreferred Qualifications\u003C/strong\u003E\u003C/h3\u003E \u003Cul data-rte-list=\u0022default\u0022\u003E \u003Cli\u003E \u003Cp\u003EDeep knowledge of secure application design, specifically a familiarity with authentication, authorization and secret management flows\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EProficiency with commonly used cryptographic tools, APIs, and best practices (e.g. tink, openssl and so forth)\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EBe able to drive a security issue from discovery to resolution, working with teams to get them over the finish line.\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EExperience with Penetration testing and red/blue teaming\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003ESingle sign on management in the cloud, especially LDAP/OAuth/AD or similar\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EComfortable with popular IDS, IPS, or SIEMs\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EExperience with VPCs, security group monitoring/auditing and similar\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EKnowledge of Continuous Integration \u0026 Delivery methodologies\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EBe familiar with auditable deploys and practices\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EHave experience with infrastructure as code and versioned releases\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003EExperience with Multi-AZ or Multi-Region deployments\u003C/p\u003E \u003C/li\u003E \u003Cli\u003E \u003Cp\u003ECreating threat-models and risk assessments\u003C/p\u003E \u003C/li\u003E \u003C/ul\u003E \u003Ch3\u003E\u003Cbr\u003E\u003Cbr\u003E\u003C/h3\u003E

Categories

Posted: 2019-06-07 Expires: 2019-12-12

Before you go...

Our free job seeker tools include alerts for new jobs, saving your favorites, optimized job matching, and more! Just enter your email below.

Share this job:

Sr. Security Engineer - 1052359

ADP
New York, NY 10007

Join us to start saving your Favorite Jobs!

Sign In Create Account
Powered ByCareerCast