[Hiring] Cybersecurity Engineer @Dscout

Role Description

We are looking for a Cybersecurity Engineer to become a part of the Cybersecurity team reporting to the VP, Compliance and Information. The Cybersecurity Engineer will contribute to reducing risk within the Dscout SaaS environment and internal IT systems. This includes planning and implementing cybersecurity controls, supporting cybersecurity operations, and monitoring the threat landscape. This role will ensure Dscout controls operate effectively over time.

What You Will Do:

• Lead the process to build security into the Dscout SaaS environment, applying security throughout the software development lifecycle.
• Collaborate with Engineering to plan and implement cybersecurity controls to protect the SaaS environment, including securing AWS resources (e.g., VPCs, EC2 instances, and containers).
• Enhance security monitoring of the SaaS environment and internal IT services by implementing SIEM and improving logging and auditability.
• Assess evolving threats and develop recommendations to mitigate risk to Dscout, providing weekly threat intelligence reports.
• Work with Engineering to analyze, contain, and mitigate cyber attacks and related incidents.
• Perform vulnerability monitoring and ensure remediation where appropriate.
• Participate in the development of security policies and processes.
• Assist in third-party risk reviews.
• Provide recommendations to continually improve security controls.
• Assist in the development of security programs and efforts to promote security awareness.

Qualifications

• Experience working with developers to conduct security reviews and provide strong recommendations to manage risk, including a strong understanding and practical use of OWASP Top 10 (web and AI).
• Experience securing AWS cloud environments and infrastructure as code solutions such as Terraform.
• Proven ability to implement security monitoring tools such as Datadog, including identifying relevant scenarios and ensuring proper logging.
• Experience responding to cyber attacks such as bots and account compromise, as well as threats like data leakage and infected computers.
• Strong knowledge of cloud computing environments.
• Working knowledge of security in software development and continuous integration/continuous delivery (CI/CD).
• Experience documenting and implementing security policies and processes.
• Knowledge of security frameworks and standards: ISO 27001, NIST, or SANS preferred.
• Experience with HITRUST and/or SOC 2 certification is preferred.
• Good communication, documentation, and presentation skills.
• Limitless curiosity and insatiable appetite to understand human behavior and relevant technologies.

Requirements

• Bachelor's degree is preferred.
• CISSP, CCSP, or GIAC security certification preferred.
• A minimum of 3 years of security experience.

Benefits

• A strong and competitive compensation package with a built-in bonus and equity program.
• An incredible and progressive benefits package (for both you and your dependents) to support work/life balance, including flexible PTO, 15 company holidays, 12 weeks of paid parental leave, 401k match, and much more.
• An education stipend to support your growth & development, and a remote work stipend.
• A company that is open and transparent with our team.