Senior Security Platform Engineer

Job Description

PayScale is changing the way companies attract and retain top talent through innovative compensation based tools and analytics. PayScale is looking for a Senior Security Platform Engineer to join our Information Security Team. You will play a key role in security platform tooling and systems working with IT, Infrastructure, DevOps, and Development Teams. The right individual for this role will be experienced with security software tools and utilities, cloud architectures, cloud infrastructure security (including network and application firewalls), application security (static and dynamic scanning tools), and DevSecOps principles. If you thrive by working in a fast paced start-up environment and working with securing cloud platforms, consider this opportunity as the next level in your professional development.

• Work with Infrastructure and DevOps teams to harden systems, networks, and engineering processes
• Implement, tune, and support various security platforms such as SIEM, Anti-Virus, DLP, MDM, etc
• Standardize and deploy monitoring tools across infrastructure such as auditd, sysmon, and osquery
• Leverage scripts and configuration management tools to automate security responses to security events
• Work with IT and Infrastructure Teams on identity management initiatives and projects
• Build automated key and secrets encryption processes leveraging internal and cloud infrastructure
• Support application security testing automation for dynamic and static scanning
• Configure and maintain security networking infrastructure such as Front Door and AWS WAF
• Implement automated SOC2 and ISO27001 technical requirements within the corporate and production infrastructures

Qualifications

• Bachelor’s degree required
• 5-7 years of work experience in a SaaS based software company
• Experience working with multiple teams including IT/Infrastructure, Development, and DevOps
• Experience with various types of scanning tools for applications, networks, and systems
• Experience implementing and tuning system monitoring such as auditd, sysmon, and osquery
• Experience implementing and supporting security tools such as CASB, DLP, EDR, and MDM
• Experience with SIEM or log aggregation platforms
• Experience with hardening systems, networks, and applications (ex. CIS Benchmarks)
• Experience with Encryption Key and Secrets Management processes and systems (HSM, KMS, Key Vault)
• Experience using IaC principles to code system images with monitoring, agents, and alerting
• Experience with Ansible and PowerShell scripting to automate security processes
• Experience with virtual network and firewalls such as web app firewalls, NSGs, VPCs, and Front Door
• Experience with Identity Management and IDaaS solutions (such as Okta, Ping, Auth0)
• Strong communication and writing skills
• Ability to collaborate with peers, managers, and clients
• Awareness and pride in 100% client satisfaction

Additional Information

All around awesome culture where together we strive to:

• Pursue excellence every day
• Create customer value
• Compete to win (and lose!) as a team

As part of our culture of transparency and commitment to employee engagement, we have several programs and resources such as:

• Regular virtual company meetings
• Coffee chats
• Table for 4 Executive conversation
• Spirit Week
• Pulsing tools for continuous conversations to drive performance and career growth
• Strengths based tools designed to help employees engage with peers and managers, supported through a program called StandOut
• Access to top notch learning courses for all employees through LinkedIn Learning
• As well as constant re-evaluation of what our employees need to be successful at work!

Our more standard benefits include:

• Flexible Paid Time Off program – most employees average around 3 weeks per year
• 14 paid holidays including Independence Week, Juneteenth and World Mental Health Day
• 3 comprehensive health plans to fit your unique needs; plans have up to 100% company-paid premium coverage for employee Medical, Dental and Vision
• Access to Premera’s Healthcare Services including an Employee Assistance Program (EAP), 24-hour Nurse Hotline, Telehealth (Doctor on Demand), Talkspace, and other virtual care options
• Flexible Spending Account (FSA) options for pre-tax employee allocations towards: Medical, Dependent Care, Parking, and Transit
• Company Paid Short Term Disability, Long Term Disability, and Life Insurance
• Comprehensive Paid Parental / Adoption Leave program
• 401k program with fully vested, immediate company match\
• Payscale Cares Hours:
  • We believe in giving back to our communities and we want you to have the time you need to do this.
  • You are now able to take half a day each quarter (typically around 4 hours) to give back!
  • 16 hours will be given per year to use in approximate increments of 4hrs per quarter
  • You can use this time to volunteer by yourself or work with your team to plan a team event where you can give back together.
• Payscale Learning Hours:
  • Research from Josh Bersin shows that employees have less than 1% of their time to focus on learning.
  • We want to give you more time to focus on building new skills, growing your career and developing yourself.
  • You can use this time to utilize LinkedIn Learning, learn from a peer, teach a topic to someone else, etc.
  • We encourage you to take half a day each quarter (typically around 4 hours) to do this.
  • 16 hours will be given per year to use in approximate increments of 4hrs per quarter

PayScale is committed to a policy of equal employment opportunity for all applicants and employees. It is our policy that employees will not be subjected to unlawful discrimination on the basis of race, color, religion, sex, age, national origin or ancestry, physical or mental disability, veteran or military status, marital status, sexual orientation, political ideology and any other basis protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including but not limited to: recruitment, hiring, transfers, promotions, training, discipline, termination, compensation and benefits, performance appraisals, education, and social and recreational programs.