Summary

Zero Hash is looking for a passionate Senior Security Engineer to help drive and implement technical strategies, innovative tooling, research, and processes. You will have extensive knowledge of web 2.0 ecosystems, including the inner workings of cloud environments and api infrastructure. You’ll be part of the overall Security Engineering team and closely partner with the Engineering, Infrastructure, and IT teams responsible for supporting our cloud operations, software development, fleet of devices and endpoints.

The Zero Hash Security Team works to protect Zero Hash; our customers, clients, and partners; and the financial markets upon which we rely. The security team leads the company’s programs for information security and cybersecurity, business continuity, and vendor risk management.

As a member of this team, you’ll lead projects and be responsible for key deliverables of the security program while collaborating across Zero Hash teams. You will continue to learn and stay current in a fun and rapidly changing environment.

Key Responsibilities:

1. Work with the product management and software engineering teams during all phases of the SDLC to ensure that applications are designed and implemented securely
2. Test web applications and underlying systems for vulnerabilities using both tools and manual techniques; manage the remediation of findings through resolution
3. Recommend code changes to eliminate vulnerabilities
4. Automate security tests within the CI/CD pipeline
5. Help develop secure coding standards and training materials based on findings seen in Zero Hash’s environment to empower engineers to write more secure code
6. Research vulnerabilities specific to blockchain technologies and incorporate this knowledge in Zero Hash’s security practices
7. Serve as an escalation point to investigate security alerts and identify incidents
8. Investigate vulnerability reports related to Zero Hash products and systems
9. Manage vendors to conduct penetration tests and other security-related projects
10. Participate in security helpdesk on-call rotation and manage adhoc security requests
11. Influence the continuous improvement of the application security program
12. Participate in projects such as threat modeling, vulnerability scanning, and audits.

Requirements:

1. 5+ years of experience as a security engineer leading projects and developing resolutions in cybersecurity
2. Experience designing software security features including, but not limited to, access control features, logging and monitoring features, input validation and session management.
3. Experience automating security tests in CI/CD pipelines & experience working with SAST and DAST testing processes and tools
4. Experience with building Detections against common attacks
5. Self-motivated and creative problem-solver able to work independently with minimal guidance
6. Configure, and support security and IT administration tools (e.g., MDM, IAM, EDR, SIEM, & IDPS)
7. May require work nights, weekends, or holidays on a rotational basis with the rest of the team to ensure 24x7 coverage.
8. Ability to manage multiple competing priorities and use good judgment to establish order of priorities on the fly
9. Experience with at least several of the following is highly desirable: Java, Angular JS, REST APIs, JSON, Go, Rust, and Python
10. Supports the team with additional security projects, as needed

Preferred:

1. Experience with Cloud Security tools
2. Prior experience with threat and vulnerability management
3. Experience with common attack techniques and conducting penetration tests
4. Bachelor's degree in computer science, computer engineering, cybersecurity or related field, equivalent experience also accepted
5. Enthusiasm for securing and breaking software

Benefits:

We believe a happy, motivated, and healthy team is the best way to succeed. We offer the following benefits:

1. Chance to earn equity
2. Paid Maternity & Paternity leave (after 6 months)
3. WeWork Membership
4. WFH Yearly Stipend
5. L&D Yearly Stipend (after 6 months)

Skills

• Communications Skills
• Cybersecurity Solutions
• Development
• Software Engineering
• Team Collaboration