Security Engineer

Who We Are

Murmuration is a nonprofit organization that amplifies the power of civic engagement by providing data, digital tools, and research-driven insights to community-focused organizations so that together we can create an America where everyone can lead healthy, free, and dignified lives.

Every day, people are trying to shape our future for the better. Fighting for water that’s safe to drink. Schools that serve students equitably. Gun laws that make sense. And rallying people who care like we do. And yet too often the skillful organizers working to mobilize communities lack access to technology that could supercharge their efforts. Knocking on every door instead of knowing which will open most easily. And going up against outside interests that have half the heart, but twice the tools.

In communities across America, Murmuration’s partners are leveraging our data, tools, and insights to help thousands of organizers orchestrate millions of individual people to do big things together. Demand big things together. To create the world they want. Together.

About the Position

The Security Engineer will provide guidance to the business and engineering teams on improving the security posture of the company. They will need a strong analytical ability, cloud infrastructure knowledge, and the ability to deliver results within a fast-moving, agile environment while providing guidance on security solutions and best practices to internal teams.

Note: At Murmuration, we are committed to becoming an even more diverse, equitable, and inclusive workplace. To this end, all staff members are expected to actively participate in DEIB (diversity, equity, inclusion, belonging) programming.

Requirements

What You’ll Do:

• Create secure architectural designs and perform security reviews with Engineering teams
• Provide guidance on security solutions and best practices to internal teams
• Utilize a monitoring infrastructure to collect actionable security signals and automate remediation
• Follow DevOps principles in implementing and maintaining security controls in a cloud-based infrastructure
• Keep security measures at the cutting edge as security for what we are building will be of utmost importance
• Perform security reviews of existing code bases including vulnerability scanning and best security practices in regard to pipelines
• Identify, evaluate, and conduct proof-of-concepts for new technologies, enabling secure development of core architectural components
• Research the latest security standard methodologies, trends, threats and vulnerabilities, and technology frameworks

What You Should Have

• 2+ years in Security Engineering, DevOps, or IT Operations roles
• Familiarity with DevOps practices as well as software engineering fundamentals, patterns, and design
• Understanding of the shared responsibility model in AWS
• Experience building and securing infrastructure code using Ansible, Terraform, CloudFormation, and/or similar tools
• Experience integrating security practices into development lifecycles and sprint planning
• Experience with programming languages for automation tools (Python)
• Experience with Infrastructure as Code tools such as Terraform, Ansible, and Cloudformation
• Experience with unit and integration testing, continuous integration, and deployment workflows
• Experience securing REST APIs and integrating third-party APIs
• Knowledge of security best practices and how to implement them in cloud infrastructure
• 2+ years of Ubuntu / Unix / Linux system administration
• General understanding of PKI, X.509, ASN.1, key exchange protocols, and authentication protocols
  

What You Could Have

• 2+ years experience building and working on cloud infrastructure for large scale distributed systems (primarily AWS-based)
• Experience developing REST APIs and integrating third-party APIs
• Experience Developing Security tools
• Knowledge of IAM, VPC, CloudWatch, API Gateway, Lambda, S3, ECS, Lambda, EKS, KMS, Shield, etc. is a strong plus
• Bash Shell scripting
• Experience implementing and leveraging logging and/or monitoring solutions is a plus
• Relevant security and AWS certifications are a plus, but not required
• Understanding/working knowledge of public cloud infrastructure and networking fundamentals in AWS 
• Relational Database Administration

Talented Security Engineers come from all walks of life and career. If you are passionate about civic engagement and technology, please apply, even if you do not check every box!

Benefits

Location