Director of Cloud Security

About MOLOCO

Moloco’s goal is to make the digital economy more equitable and profitable by delivering advanced machine learning to companies of all sizes. With Moloco’s machine learning platform for growth and performance, every app publisher and online retailer can now unlock the value of their unique, first-party data for user acquisition, retention, and monetization campaigns. 

Founded in 2013, our advanced machine learning engine powers our product portfolio. Moloco Cloud DSP enables performance marketers to quickly scale user acquisition and achieve greater lifetime value through battle-tested prediction models. Moloco Retail Media Platform enables online retailers and marketplaces to establish their own performance ads business. 

Our technology is best in class; we received the SMARTIES X silver award for Machine Learning and AI, and Moloco was named the Cross-Industry Winner for Google Cloud Customer Awards. 

The company is in hyper-growth mode and we ranked #95 in the Inc. 5000 fastest-growing private companies for 2022. We ranked #91 among Deloitte’s 2021 Fast 500 and have been certified by 91% of the company via Great Places to Work. 

It’s a great time to join this innovative team. Moloco is headquartered in Silicon Valley, with offices in San Francisco, New York, Seattle, London, Seoul, Singapore, Beijing, and Tokyo. For more information, visit www.moloco.com

The Impact You'll Be Contributing to Moloco:

We are in search of a reliable and steadfast security leader to build out best in class security operations that encompass security engineering and architecture, monitoring, vulnerability management, identity and access management and application security. In this highly visible role reporting to the CISO, you will play an integral role in securing our customers’ data from the ever-evolving cyber threat landscape by embedding a practical security mindset across engineering, data and product teams within the company.

Here’s what you’ll be working on:

The Director of Cloud Security will serve as a highly functional leader, driving operations and change across the organization by:

• Directing and overseeing day-to-day operation and effectiveness of all cloud security-related programs and initiatives.
• Establishing guidance and direction for securing Moloco’s VMs, containers, APIs, and other systems.
• Working with software development, infrastructure, and product teams to drive security by design into their process and raise the priority of security concerns in their backlogs.
• Assessing the risk associated with newly discovered vulnerabilities and directing the application of patches to remediate findings.
• Conducting information security risk assessments, internal and external vulnerability scans and penetration tests.
• Managing and maintaining vulnerability tooling and vulnerability managed service(s) to realize secure application CI/CD pipeline.
• Assessing and evaluating applications, infrastructure, rules, access controls, and configurations of various platforms.
• Recognizing common coding flaws at a high level to support Application Security oversight.
• Preparing reports that identify technical and/or procedural findings, which are accompanied with recommended remediation strategies and solutions.
• Close collaboration with Security Compliance and Privacy to ensure adherence to security (ISO 27001, SOC-2) and privacy (GDPR, CCPA) frameworks.

Here is what you need to succeed  (Experience & Qualifications)

• A technical background with 10+ years of progressive, hands-on experience across Security Engineering and DevSecOps
• Cloud native (GCP a major plus) Security experience at a major technology company 
• Comfortable with deployment automation and configuration management (Terraform), including implementation of security controls in Kubernetes
• Experience hardening production environments and implementing layered defensive technologies such as Firewalls, WAFS, IDS/IPS, etc.
• Soli