Senior Security Engineer

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $145 000 - $170 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Wpromote

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 2001

📣 Marketing

Marketing

Wpromote est une agence de marketing digital qui se concentre sur la transformation des entreprises à travers des stratégies marketing innovantes. Ils offrent une large gamme de services incluant les médias payants, le SEO, le marketing de contenu, les médias sociaux, et le marketing d'influence. Wpromote utilise sa technologie propriétaire et des insights basés sur les données pour optimiser la croissance commerciale et la performance marketing. Leur approche est agile et axée sur les résultats, mettant l'accent sur la planification stratégique, l'optimisation du taux de conversion et l'intelligence d'affaires. Wpromote vise à aider les entreprises à débloquer leurs données et prévoir les opportunités futures, travaillant avec les leaders de catégorie et les startups pour surpasser la concurrence à travers des solutions créatives. L'agence est reconnue pour son approche innovante et son impact sur la rentabilité des clients, soulignant l'importance de l'utilisation des données et de la planification stratégique du marketing.

Description

• Drive the design, implementation, and continuous advancement of Wpromote's security engineering program • Shape security decisions in partnership with IT leadership and report to the Director of IT • Serve as a senior security presence and point of escalation across the security function • Evaluate, integrate, and rationalize the security tooling portfolio • Design identity, access, and session governance across Google Workspace and additional identity providers • Define GCP security requirements and translate them into Cloud IAM, organization policy, service account governance, and audit logging controls • Advance phishing-resistant MFA, secrets-management architecture, SAML SSO, SCIM provisioning, and session policy • Own OAuth app vetting, token lifecycle and revocation, and third-party application risk management • Own incident response and forensic practice, independently run investigations, and coordinate external partners during major escalations • Implement detection, policy, configuration, and response automation as version-controlled, peer-reviewed, and tested code • Partner with platform engineering on Terraform and cloud guardrails • Mentor and develop team members and inform security decisions across the organization

🎯 Exigences

• 5+ years of hands-on security engineering experience in a professional environment • Track record of owning security architecture and projects end to end • Detection engineering experience, including selecting, building, and operating a SIEM; writing and tuning detections; and owning log pipelines, alerting, and monitoring • 4+ years of hands-on security cloud engineering; GCP strongly preferred, including Cloud IAM, organization policy, service account governance, and audit logging • Deep identity and access management expertise, including SAML SSO federation and SCIM provisioning and deprovisioning • SaaS identity security expertise, including phishing-resistant MFA, passkeys, hardware keys, secrets-management architecture, OAuth app governance, token lifecycle, and third-party application risk • Hands-on incident response and forensic methodology, including sound evidence handling • Endpoint security posture experience, including EDR operations such as CrowdStrike Falcon or equivalent and device-trust or conditional-access design • Experience operating vulnerability management or exposure management programs, including prioritization by exploitability, asset criticality, and business risk • Security automation and infrastructure-as-code fluency, including detection-as-code and Terraform, beyond ad hoc scripting • Position is not eligible for immigration sponsorship • Nice-to-have: infrastructure, cloud platform, DevOps, SRE, or systems engineering background • Nice-to-have: experience scaling or maturing a security program in a fast-growing environment • Nice-to-have: industry certifications such as GCP Professional Cloud Security Engineer, GIAC, CISSP, or OSCP • Nice-to-have: least-privilege access management across vendor systems, mentoring experience, SOC 2 or similar compliance frameworks, and Python or Bash scripting

🏖️ Avantages

• Unlimited PTO • Extended Holiday break (Winter) • 100% paid parental leave • 401(k) matching • Medical, Dental, Vision, Life, Pet Insurance • Sponsored life insurance • Short Term Disability insurance and additional voluntary insurance • Annual Class Pass credits • Remote work flexibility • Office hubs in Los Angeles, Chicago, and New York for learning and development opportunities, events, workspace, and in-person collaboration