Security Engineer

🕒 September 2

🇺🇸 United States – Remote

💵 $130k - $150k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

EverCommerce

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2016

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 Private Equity Round on 2019-07

Healthcare • Consulting • Logistics

EverCommerce is the leading service commerce platform, providing vertically-tailored, integrated SaaS solutions to over 500,000 global service-based businesses. Established in 2016, EverCommerce offers software solutions that help businesses market their services, streamline day-to-day operations, and enhance customer engagement. The company specializes in powering the service economy with digital transformation across multiple industries, including Home & Field Services, Health Services, and Fitness & Wellness. EverCommerce's technology aims to accelerate growth, improve operations, and increase retention for small and medium-sized businesses, transforming the way they interact with customers through modern digital and mobile applications.

📋 Description

• Create and maintain security architecture and engineering processes and procedures • Design system architectures that meet established cybersecurity requirements and align with customer needs • Define, document, and communicate security requirements • Develop security architecture requirements and implementation guidance based on NIST 800-53 and other security control frameworks • Architect, design, implement, maintain, and operate information system security controls and countermeasures • Provide techniques and patterns for securing integration with external security system vendors and cloud providers • Lead regular architecture and design reviews to ensure requirements implementation • Evaluate and contribute to life-cycle management of multiple security technologies • Identify security risks and control gaps within systems, designs, products, data flows, and processes; recommend corrective architecture, integrations, controls, and operations • Participate in developing security requirements, architectures, and documentation for new technology deployments • Perform secure architecture and design reviews of new technology and security system deployments • Collaborate with business teams to integrate secure-by-design principles into CI/CD pipelines and Agile development processes • Maintain the security architecture roadmap and strategic plan • Leverage emerging technologies and advanced security practices • Build, maintain, and mature security architecture metrics and reporting • Serve as a subject matter expert/contributor improving the overall security framework and program • Mentor junior security engineers and analysts • Perform additional duties as required and assigned • Coordinate closely with information security engineers, security stakeholders, and internal and external software development teams • May travel to corporate headquarters in Denver, Colorado, or other office locations around North America

🎯 Requirements

• At least 5 years of relevant work experience in a technical field (e.g. cybersecurity, software development, or systems administration) • Bachelor's Degree in a technical discipline such as Cyber Security, Information Technology, Computer Science, or Information Systems - or equivalent professional experience • At least one current industry-recognized security certification; CISSP, CISM, CISA, GIAC or commensurate experience • Excellent communication and interpersonal skills, with the ability to communicate and collaborate effectively with cross-functional teams, matrixed organizations, and technical and non-technical stakeholders • Demonstrated experience with systems compliant to NIST 800-53, NIST CSF, or ISO 27001-2022 security control frameworks • Exceptional knowledge and understanding of creating, implementing, and securing cloud technologies such as AWS and Azure • Knowledge of information security risk assessment methodologies and standards • Highly flexible, self-motivated, and eager to learn, with a strong passion for cybersecurity • Excellent verbal and written English communication skills • Advanced knowledge of common attacks, attack methods, and defense architectures (preferred) • Experience securing multi-tenant compute services, microservices, and modern APIs (preferred) • Working knowledge of common web and container-based vulnerabilities (preferred) • Experience developing and implementing information security policies and procedures (preferred) • Experience developing technical documentation, including reports, proposals, statements of work, and whitepapers (preferred) • Must be eligible to work without sponsorship

🏖️ Benefits

• Continued investment in your professional development • Day 1 access to a robust health and wellness benefits package, including an annual wellness stipend • 401k with up to a 4% match and immediate vesting • Flexible and generous (FTO) time-off • Employee Stock Purchase Program • Annual bonus opportunity