Senior Cybersecurity Engineer

🕒 vor 2 Monaten

🇺🇸 Vereinigte Staaten – Remote

⏰ Vollzeit

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 36%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Indico Data

WebsiteLinkedInAlle Stellen

51 - 200 Mitarbeiter

Gegründet 2013

🤖 Künstliche Intelligenz

🛡️ Versicherung

☁️ SaaS

💰 €22.000.000 Series B im 2020-12

Artificial Intelligence • Insurance • SaaS

Indico Data ist eine führende Technologieplattform, die die Versicherungsbranche mit fortschrittlichen KI-Lösungen verbessert, die speziell für die Risikoanalyse, das Schadensmanagement und die Vertragsverwaltung entwickelt wurden. Ihre Decision Automation Platform verarbeitet unstrukturierte Daten, um umsetzbare Erkenntnisse zu liefern, die eine schnellere und genauere Entscheidungsfindung für globale Versicherungsunternehmen ermöglichen. Mit einem Fokus auf die Optimierung der Wertschöpfungskette in der Versicherung rationalisiert Indico Data Arbeitsabläufe, verbessert Effizienzen und unterstützt innovative, KI-gesteuerte Entscheidungsprozesse in verschiedenen Versicherungsfunktionen.

Beschreibung

• Improve Indico’s technical security posture across AWS, Kubernetes, CI/CD, product security, internal systems, and incident response. • Partner with the CISO and CTO to turn security priorities into practical technical controls, standards, reviews, and operating processes. • Review Engineering work against security standards, with authority to request changes where needed. • Partner with Engineering on AWS security controls, including IAM, networking, account structure, logging, encryption, key management, backups, production access, and customer-dedicated environments. • Review and improve Kubernetes and container security controls, including workload identity, RBAC, network boundaries, image security, runtime monitoring, and deployment patterns. • Define and improve secure CI/CD patterns, including GitHub permissions, branch protections, privileged workflows, secrets handling, release controls, and deployment access. • Define and oversee processes for vulnerability management, committed-secret response, secure development, incident response, and access control while Engineering, Platform, IT/Ops, and system owners operate them in their domains. • Provide product security support, including secure design review, threat modeling for sensitive features, scanner tuning, and high-risk change review. • Improve detection and response coverage across tools such as CloudTrail, GuardDuty, CrowdStrike, SIEM/logging platforms, vulnerability scanners, and secrets detection. • Own day-to-day security monitoring and response operations, including alert routing, triage expectations, escalation paths, and detection improvements. • Coordinate technical containment during security incidents across Engineering, Platform, IT/Ops, and leadership. • Maintain incident response runbooks and partner with the CISO on severity, executive escalation, counsel/compliance coordination, and customer communication strategy. • Create practical security guidance, standards, procedures, and runbooks for security-sensitive work such as production access, secrets handling, vulnerability remediation, incident response, customer data handling, and secure engineering. • Maintain reusable technical security documentation, standard responses, and evidence packages for customer due diligence and compliance support. • Evaluate security tools and vendors with a focus on technical coverage, operational fit, and reducing manual work. • Build or sponsor lightweight automation, checks, dashboards, and workflows that make security controls repeatable.

🎯 Anforderungen

• 6+ years of relevant security experience, ideally in a startup, SaaS, cloud-native, or enterprise software environment. • Strong hands-on experience with AWS security, including IAM, networking, logging, monitoring, encryption, access controls, and production security. • Experience securing Kubernetes, containers, CI/CD pipelines, infrastructure-as-code, and modern cloud deployment patterns. • Strong understanding of identity and access management, least privilege, privileged access, workload identity, and service-to-service permissions. • Working knowledge of application and product security, including authentication, authorization, secure coding, common web risks, and secure design review. • Experience defining or operating vulnerability management, secrets management, secure development, access control, or incident response processes. • Experience with secrets management, cloud key management, encryption design, data residency, threat modeling, or secure SDLC programs. • Experience with security monitoring, alert triage, incident response coordination, and remediation tracking. • Experience with Python, Go, Bash, or other scripting languages for security automation. • Ability to review infrastructure, application, and operational changes for material security risk. • Strong written and verbal communication skills, including clear technical guidance, standards, runbooks, and customer-facing security documentation.

🏖️ Vorteile

• Remote work supports. • Flexible working hours. • Professional development opportunities.