Senior Security Engineer

Company Description

PG Forsta is the leading experience measurement, data analytics, and insights provider for complex industries—a status we earned over decades of deep partnership with clients to help them understand and meet the needs of their key stakeholders. Our earliest roots are in U.S. healthcare –perhaps the most complex of all industries. Today we serve clients around the globe in every industry to help them improve the Human Experiences at the heart of their business. We serve our clients through an unparalleled offering that combines technology, data, and expertise to enable them to pinpoint and prioritize opportunities, accelerate improvement efforts and build lifetime loyalty among their customers and employees.

Like all great companies, our success is a function of our people and our culture. Our employees have world-class talent, a collaborative work ethic, and a passion for the work that have earned us trusted advisor status among the world’s most recognized brands. As a member of the team, you will help us create value for our clients, you will make us better through your contribution to the work and your voice in the process. Ours is a path of learning and continuous improvement; team efforts chart the course for corporate success.

Our Mission:

We empower organizations to deliver the best experiences. With industry expertise and technology, we turn data into insights that drive innovation and action. 

Our Values:

To put Human Experience at the heart of organizations so every person can be seen and understood. 

• Energize the customer relationship: Our clients are our partners. We make their goals our own, working side by side to turn challenges into solutions. 
• Success starts with me: Personal ownership fuels collective success. We each play our part and empower our teammates to do the same. 
• Commit to learning: Every win is a springboard. Every hurdle is a lesson. We use each experience as an opportunity to grow. 
• Dare to innovate: We challenge the status quo with creativity and innovation as our true north. 
• Better together: We check our egos at the door. We work together, so we win together. 

The Security Engineer is a member of PG Forsta’s Information Security team and is responsible for building and maintaining controls that manage information risk and security.  The engineer is expected to build and maintain administrative, technical, and physical controls to secure PG Forsta data and keep PG Forsta in compliance with applicable laws, regulations, and contractual terms.

We are seeking a Senior Security Engineer with a strong software development background to help us design, build, and scale secure systems. You will play a critical role in researching, architecting, and implementing innovative security solutions while working closely with product engineering teams to ensure security is embedded throughout the development lifecycle.

Skills we are looking for:

• Software development, including automated CI/CD pipelines
• SBOM, SCA, SAST, DAST (Software Bill of Materials, Software Composition Analysis, Static Analysis Security Testing, Dynamic Analysis Security Testing)
• Identity management best practices
• Vulnerability management, specifically with software dependencies
• Incident response and troubleshooting
• ITSM workflow and process

This position has no direct reports. It is a remote position that may require coordination with US working hours, occasional travel (1-2 times per year) and on-call support every 6-8 weeks.

Ideal Candidate: Application developer/engineer with experience with build pipelines, security testing, SBOMs, vulnerability management, and coordinating with product, engineering, and security teams.

About the Team

The Risk and Security team is part of the Legal Department.  The team reports to the SVP, Risk and Security who reports to the General Counsel.  It consists of people with technical security skills and non-technical audit and compliance skills.

PG Forsta’s security team is well-funded and supported by management.  We have meaningful influence on how systems are designed and implemented.  The department is structured to allow internal staff to leave work at work.  While the job will require setting goals and meeting deadlines, it rarely requires more than 45 hours of work per week.

Duties and Responsibilities

Strategy & Vision

• Participate in vision, principles, and security strategy for projects or specific technologies, ensuring alignment with organizational goals.

Operational Execution

• Integrate a