Security Engineer II
Description For Security Engineer II
fabric is a next-generation commerce platform revolutionizing the industry. As a Security Engineer II, you'll join a brilliant team making history in evolving commerce. Your responsibilities include threat modeling, implementing security measures, maintaining security tools, conducting security reviews, and collaborating with various teams to integrate security best practices. You'll work on protecting customer data, mitigating attack risks, and fostering a culture of security and reliability.
Key responsibilities:
- Develop and maintain threat models
- Design and deploy security tools and controls
- Conduct security reviews and vulnerability scanning
- Enhance access controls and encryption methods
- Automate security controls within CI/CD pipelines
- Assess and monitor security risks
- Educate employees on security best practices
- Assist with customer systems integration
- Participate in incident response activities
- Drive compliance with regulations and industry standards
Required skills:
- 5+ years of security engineering/application security experience
- 2+ years of AWS experience
- Scripting languages (Python or JavaScript)
- OWASP and NIST security standards knowledge
- DevSecOps and CI/CD processes experience
- Ability to establish and report security metrics
This role offers a competitive salary range of $120k to $160k USD, along with benefits such as PTO, holiday plans, medical/dental/vision insurance, wellness programs, and a 401k program. Join fabric in their mission to revolutionize commerce for everyone and work with a team invested in your personal and professional growth.
Responsibilities For Security Engineer II
- Develop and maintain threat models using methodologies like STRIDE and DREAD
- Design, deploy, and maintain centralized security tools and controls
- Conduct security reviews for software systems, integrations, and operational processes
- Review and enhance access controls, authentication mechanisms, and data encryption methods
- Build and manage services and tools to automate security controls within CI/CD pipelines
- Assess, identify, and monitor security risks, vulnerabilities, and threats
- Educate and train employees on security awareness and best practices
- Assist systems integration with fabric customers to ensure security best practices
- Participate in security detection, incident response, and post-response activities
- Support and drive compliance programs with relevant regulations and industry standards
Requirements For Security Engineer II
- 5+ years of prior experience in security engineering/applications security
- 2+ years of experience with AWS
- Experience with scripting languages such as Python or JavaScript
- Experience working with OWASP and NIST security standards and frameworks
- Experience within DevSecOps, CI/CD processes, SDLC, and related tools
- Ability to establish and report metrics and KPIs to the executive leadership team
Benefits For Security Engineer II
- Competitive compensation packages
- PTO and Holiday plans
- Medical, Dental, Life, and Vision insurance
- Wellness & Technology Programs
- 401k Program
- Fast-paced, fun and collaborative environment
- A team invested in you both personally and professionally
