Senior Security Engineer

<p><strong>About SecurityScorecard:</strong></p> <p><span style="font-weight: 400;">SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Alex Yampolskiy and Sam Kassoumeh and funded by world-class investors, SecurityScorecard’s patented rating technology is used by over 25,000 organizations for self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting; making all organizations more resilient by allowing them to easily find and fix cybersecurity risks across their digital footprint.&nbsp;</span></p> <p><span style="font-weight: 400;">Headquartered in New York City, our culture has been recognized by Inc Magazine as a "Best Workplace,” by Crain’s NY as a "Best Places to Work in NYC," and as one of the 10 hottest SaaS startups in New York for two years in a row. Most recently, SecurityScorecard was named to Fast Company’s annual list of the</span><a href="https://securityscorecard.com/blog/blog-top-innovators-of-the-year/"><span style="font-weight: 400;"> </span><span style="font-weight: 400;">World’s Most Innovative Companies for 2023</span></a><span style="font-weight: 400;"> and to the Achievers 50 Most Engaged Workplaces in 2023 award recognizing “forward-thinking employers for their unwavering commitment to employee engagement.”&nbsp; SecurityScorecard is proud to be funded by world-class investors including Silver Lake Waterman, Moody’s, Sequoia Capital, GV and Riverwood Capital.</span></p> <p><strong>About the Role:</strong></p> <p>We are seeking a skilled and motivated Senior Security Engineer to join our growing security team. You will play a crucial role in enhancing and maintaining our internal security posture, as well as contributing to the security of our products and services. This is a hands-on position requiring a solid understanding of various security domains and the ability to operate effectively in a fast-paced environment.</p> <p><strong>Key Responsibilities:</strong></p> <p>As a Senior Security Engineer, your responsibilities will include a range of activities essential to our security program, such as:</p> <ul> <li>Implementing, monitoring, and maintaining security controls across our corporate and cloud environments.</li> <li>Participating in the application security program, including supporting security testing, vulnerability management, and secure development practices.</li> <li>Managing and improving our identity and access management (IAM) solutions and processes.</li> <li>Contributing to our incident response capabilities, including participating in security incident detection, analysis, and remediation efforts.</li> <li>Supporting corporate security initiatives, including security awareness training, policy enforcement, and compliance activities.</li> <li>Assisting with the third-party risk management program, including security reviews and assessments of vendors and partners.</li> <li>Performing regular security assessments, vulnerability scans, and penetration testing (or coordinating external tests).</li> <li>Administering and optimizing various security tools and technologies.</li> <li>Collaborating with IT, Engineering, and other teams to ensure security best practices are integrated into daily operations and new projects.</li> <li>Developing and maintaining security documentation, procedures, and runbooks.</li> <li>Staying current with the latest security threats, vulnerabilities, and industry trends.</li> </ul> <p><strong>Required Qualifications:</strong></p> <ul> <li>6+ years of progressive experience in a dedicated cybersecurity role.</li> <li>Demonstrated experience in Application Security (AppSec) principles and practices.</li> <li>Direct experience administering and optimizing key security tools, including Okta (IAM), CrowdStrike (EDR), and Wiz (Cloud Security Posture Management).</li> <li>Proven experience with Cloud Security concepts and best practices (experience with at least one major cloud provider required).</li> <li>Hands-on experience with Identity Management and Access Control systems.</li> <li>Experience participating in Incident Response processes and procedures.</li> <li>Understanding of corporate security principles and their practical application.</li> <li>Experience with third-party risk management processes and security assessments.</li> <li>Solid understanding of networking fundamentals and security protocols.</li> <li>Familiarity with common security frameworks and standards (e.g., NIST, ISO 27001, FedRAMP, StateRAMP).</li> <li>Excellent problem-solving skills and the ability to work independently and as part of a team.</li> <li>Strong written and verbal communication skills.</li> </ul> <p><strong>Preferred Qualifications:</strong></p> <ul> <li>Experience with specific security tools and platforms such as:</li> <ul> <li>IdP</li> <li>Cloud Service Provider</li> <li>Cloud Security Posture Management tools</li> <li>Endpoint Detection and Response solutions</li> <li>Google Workspace (security features and administration)</li> </ul> <li>Security certifications such as Security+, CySA+, CEH, cloud-specific security certifications (e.g., AWS Certified Security – Specialty).</li> <li>Experience working in a cybersecurity vendor environment.</li> </ul> <p><span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;SecurityScorecard is an industry-leading cybersecurity company backed by Google, Sequoia, and Riverwood. Our mission is to make the world a safer place. We measure your and your vendors' cyber-health by assigning a security rating of \&quot;A\&quot; through \&quot;F\&quot; based on outside-in, non-intrusive data. Our Comprehensive security ratings, advanced data analytics, and actionable insights discover Third-Party Vulnerabilities &amp; Security Gaps In Real-Time. \nHeadquartered in NYC with over 200+ employees globally, raised over $110M USD, used by 1,000+ enterprise customers, and rating 1.5 million companies. We have created a new category of enterprise software, and our culture has helped us be recognized as one of the 10 hottest SaaS startups in NY for two years in a row.\nOur vision is to create a new language for companies and their partners to communicate, understand, and improve each other’s security posture.&quot;}" data-sheets-userformat="{&quot;2&quot;:15235,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:[null,2,16043212],&quot;10&quot;:2,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:[null,2,0],&quot;15&quot;:&quot;\&quot;Proxima Nova\&quot;&quot;,&quot;16&quot;:10}"><strong>Benefits:</strong><br><br>Specific to each country, we offer a competitive salary, stock options, Health benefits, and unlimited PTO, parental leave, tuition reimbursements, and much more!</span></p> <p>Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range. In addition to base salary, employees may also be eligible for annual performance-based incentive compensation awards and equity, among other company benefits.</p> <ul> <li>For candidates based in U.S. locations, the estimated total compensation range for this position is $200,000 - $250,000 USD (base salary plus bonus).</li> <li>For candidates based in Brazil/Argentina, the estimated total compensation range for this position is $100,000 - $120,000 USD (base salary plus bonus).&nbsp;</li> </ul> <p><em><span style="font-weight: 400;">SecurityScorecard is committed to Equal Employment Opportunity and embraces diversity. We believe that our team is strengthened through hiring and retaining employees with diverse backgrounds, skill sets, ideas, and perspectives. We make hiring decisions based on merit and do not discriminate based on race, color, religion, national origin, sex or gender (including pregnancy) gender identity or expression (including transgender status), sexual orientation, age, marital, veteran, disability status or any other protected category in accordance with applicable law.&nbsp;</span></em></p> <p><em><span style="font-weight: 400;">We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact talentacquisitionoperations@securityscorecard.io.</span></em></p> <p><em><span style="font-weight: 400;">Any information you submit to SecurityScorecard as part of your application will be processed in accordance with the Company’s privacy policy and applicable law.&nbsp;</span></em></p> <p><em><span style="font-weight: 400;">SecurityScorecard does not accept unsolicited resumes from employment agencies.&nbsp; Please note that we do not provide immigration sponsorship for this position. &nbsp; <span style="color: rgb(255, 255, 255);">#LI-DNI</span></span></em></p>