Senior Security Engineer
CaptivateIQ
Software Engineering
United States · Remote
Posted on Thursday, May 2, 2024
CaptivateIQ is a leading sales commission platform — recognized by industry analysts, including Forrester, as well as reputable marketplaces like G2. We are trusted by category leaders and innovators like Gong, Lattice, and DataRobot.
With backing from Sequoia, Accel, ICONIQ, and other leading investors, CaptivateIQ is on a mission to enable every company to take control of commission management.
Come and see why Glassdoor and Comparably have recognized CaptivateIQ as a best place to work!
About the role:
Join our elite cybersecurity team and play a pivotal role in fortifying our organization’s defenses against complex security threats. As a Senior Security Engineer / Lead, you will leverage your advanced expertise in cybersecurity to oversee and enhance our security infrastructure. This role demands a proactive approach to identifying, analyzing, and mitigating risks, ensuring robust security across all operations. You will lead strategic security initiatives and governance, mentor junior engineers, and serve as a key advisor on security matters to senior management.
Responsibilities:
- Design advanced security architectures and implement systems to safeguard our sensitive data and systems from emerging threats.
- Lead the development and enforcement of comprehensive security policies, procedures, and controls that align with industry standards.
- Conduct comprehensive security assessments and penetration tests to identify vulnerabilities and recommend robust countermeasures.
- Oversee incident response activities, providing expert guidance during high-level security breaches and ensuring rapid mitigation.
- Lead the development, implementation, and ongoing management of a comprehensive security governance program.
- Collaborate with executive leadership to integrate security strategies with business objectives and communicate the impact of security decisions.
- Mentor and develop a team of security professionals, enhancing their skills and aligning their efforts with organizational goals.
- Engage in continuous research to stay ahead of the latest security trends and technologies, applying this knowledge to strengthen our security posture.
Requirements:
- Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
- At least 7 years of experience in cybersecurity, including substantial experience in security systems design, risk management, and incident response.
- Deep understanding of advanced cybersecurity frameworks, protocols, and standards (e.g., ISO 27001, NIST, SOC 2, GDPR).
- Proficiency with advanced security technologies and tools (e.g., Advanced EDR, Next-Gen Firewalls, Complex SIEM solutions).
- Exceptional analytical and problem-solving skills, capable of leading complex security projects and initiatives.
- Excellent leadership abilities, with a track record of mentoring and developing security teams.
- Strong communication skills, adept at briefing executives and stakeholders on security risks and strategies.
Nice to have:
- Relevant advanced certifications (e.g., CISSP, CISM, GIAC) are highly valued.Experience in leading security in cloud environments and understanding of cloud security best practices.Prior involvement in developing and leading enterprise-wide security training programs.
Benefits:
- (US-ONLY) 100% of medical, dental, and vision covered including 75% for dependents
- Flexible vacation days and quarterly mental health days so you can recharge
- Enjoy a one-time expense on your 1-year work anniversary (to use for travel, home furnishings, fancy meal)
- One time work from home stipend & annual stipends for professional development and caretaking
- Virtual team lunches to keep you connected
- (US-ONLY) 401k plan to participate in and save towards the future
- Newest Apple products to help you do your best work
- Employee Resource Groups (ERGs) to support and celebrate the shared identities and life experiences of communities within CaptivateIQ. ERGs directly support our company-wide DEI goals as a space for developing and retaining diverse talent
Notice to Prospective Candidates:
- Only emails from @captivateiq.com should be trusted.
- We are aware of active recruitment scams using the CaptivateIQ name, in which individuals pose as our recruiters and post fake remote job openings and make fake job offers on the Internet. Please note, we will never do the following:
- Attempt to correspond with a candidate using a free web-based account, such as an email address that ends in @gmail.com, @yahoo.com, @hotmail.com, etc.
- Make an offer of employment without conducting multiple rounds of interviews face-to-face using secure video-conferencing technology.
- Ask candidates to cash checks to buy equipment on behalf of CaptivateIQ.
- Ask candidates to make a payment in order to be considered for a position.
- Make early requests for candidates' personal information such as date of birth, passport details, credit card numbers, bank details and social security number, etc.
- Please note that we’ll only ask for more sensitive personal information in connection with background checks after an offer is made.
CaptivateIQ participates in E-Verify, web-based system that allows enrolled employers to confirm the eligibility of their employees to work in the United States