Sr. Enterprise Security Engineer

Introduction to Demandbase: 

Demandbase is the Smarter GTM™ company for B2B brands. We help marketing and sales teams overcome the disruptive data and technology fragmentation that inhibits insight and forces them to spam their prospects. We do this by injecting Account Intelligence into every step of the buyer journey, wherever our clients interact with customers, and by helping them orchestrate every action across systems and channels - through advertising, account-based experience, and sales motions. The result? You spot opportunities earlier, engage with them more intelligently, and close deals faster. 

As a company, we’re as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have offices in the San Francisco Bay Area, New York, Seattle, and teams in the UK and India, and allow employees to work remotely. We have also been continuously recognized as one of the best places to work in the San Francisco Bay Area.

We're committed to attracting, developing, retaining, and promoting a diverse workforce. By ensuring that every Demandbase employee is able to bring a diversity of talents to work, we're increasingly capable of living out our mission to transform how B2B goes to market. We encourage people from historically underrepresented backgrounds and all walks of life to apply. Come grow with us at Demandbase!

About the Role:

We’re looking for a Sr. Enterprise Security Engineer to own major components of our enterprise security program.  This is a hands-on technical role but also offers the opportunity to drive the strategy & roadmap for security in a modern distributed enterprise.  We’ll look to you to set standards and evangelize best practices across the organization, and mentor more junior team members. You’ll be supported by an established IT team that understands & embraces security objectives, a product security team that looks after our customer-facing SaaS platform, and privacy & GRC teams to provide guidance on risk & compliance matters. Bring your passion, expertise, initiative, and creativity to Demandbase and help us take our enterprise security program to the next level of excellence!

The compensation range for this role is: $180,000 - $250,000

What you’ll be doing:

• Define success standards & metrics for enterprise security functions, and drive increasing maturity over time
• Serve as technical domain expert for all things pertaining to enterprise security
• Define patch, vulnerability, and configuration management programs across the corporate IT landscape and work with IT to implement
• Consult with the IT team on change management providing insight to the security ramifications of proposed changes
• Assist in the vendor review process ensuring the prospective vendors live up to Demandbase standards of security
• Conduct audits of Demandbase corporate IT systems and access grants 
• Review, maintain and configure effective detection & response systems, supported by best-in-class EDR technology and an outsourced MDR partner
• Work with the GRC team to support other compliance initiatives such as SOC 2, privacy, and ISO 27001

What we’re looking for:

• 8 years in Information Technology at a software company
• 5 years in Information Security at a software company
• Hardening infrastructure and applications in a SaaS environment, including Okta, Google Workspace, Office 365, Salesforce and others
• Managing network security, including wireless networks, VPNs, and firewall configuration
• Configuring modern enterprise communications security, such as on Slack, Zoom, & Google Workspace 
• Creating secure baselines for and hardening of user endpoints (MacOS, Windows)
• Configuring & securing cloud infrastructure environments in AWS, GCP and/or Azure
• Participation in risk assessment and BCP/DR initiatives
• Ownership of detection & response capabilities, including telemetry source, alerting, triage, analysis, and response activities

The ideal candidate will have:

• The ability to take a pragmatic, risk-based approach to decision making while applying practical security principles and practices
• Exceptional written and verbal communication skills
• Strong ability to work independently and learn new skills as necessary to be successful
• Certifications & academic degrees are nice to have – but we’re far more interested in seeing you demonstrate passion, initiative, and domain expertise.

Benefits:

Our benefits include options for up to 100% p