Security Engineer
Description For Security Engineer
EngFlow is revolutionizing software development by providing cloud-based distributed services that dramatically accelerate build and test processes. Founded by key Bazel contributors, we're backed by top investors and serve companies from startups to Fortune 500. Our solutions achieve 10x faster builds while offering crucial observability insights.
As a Security Engineer, you'll be integral to our Product Engineering team, reporting to the Head of Product Engineering with a CTO dotted line. Your mission involves maintaining system security, ensuring SOC 2 compliance, and addressing customer security concerns. The role demands expertise in security best practices, audit management, and infrastructure protection.
We offer a dynamic remote work environment with comprehensive benefits and regular team meetups worldwide. You'll join a culture that values both productivity and enjoyment, with regular team events and activities. This position is perfect for security professionals who excel in fast-paced environments and want to impact how companies build and ship software securely.
The ideal candidate brings strong analytical skills, deep security knowledge, and experience with cloud platforms and build systems. You'll manage critical security processes, from penetration testing to compliance audits, while collaborating across teams to enhance our security posture.
Responsibilities For Security Engineer
- Define and enforce security best practices across EngFlow's infrastructure
- Manage security audits, including SOC 2 / FedRAMP compliance
- Oversee penetration testing with external vendors
- Implement and maintain intrusion detection, vulnerability management, and cloud security controls
- Collaborate with engineering teams to enhance supply chain security
- Own and update the Information Security Management System (ISMS) and related documentation
- Address security reviews, questionnaires, and compliance inquiries from customers
- Participate in an on-call rotation to support escalated security issues
Requirements For Security Engineer
- Strong analytical skills and passion for security optimization
- Advanced knowledge of supply chain security and cloud security
- Experience managing SOC 2 / FedRAMP audits and penetration tests
- Expertise in intrusion detection, vulnerability tracking, and management
- Familiarity with at least one build system (Bazel, CMake, Maven, Gradle, Nix, Buck, etc.)
- Experience in DevOps, DevInfra, Linux, and Unix shell
- Hands-on experience with at least one cloud provider (AWS, Azure, GCP, OpenShift, Oracle Cloud)
Benefits For Security Engineer
- Comprehensive medical, dental, vision benefits
- 401k bonus
- Parental leave
- Generous vacation
- Team meetups several times a year at exciting destinations
- Fun team events (chocolate, whisky and tea tastings, monthly team games, escape room)
Jobs Related To EngFlow Inc. Security Engineer
