Sr. Security Engineer

About Us

Our mission is simple: we want to set people free to do meaningful work. People love our software—and it turns out that people love working here too. We've been recognized as a "Best Company to Work For” and we're proud of our team for creating software that makes an impact in the lives of HR pros and employees all over the world.

About Us

Our mission is simple: we want to set people free to do meaningful work. People love our software—and it turns out that people love working here too. We've been recognized as a "Best Company to Work For” and we're proud of our team for creating software that makes an impact in the lives of HR pros and employees all over the world.

We're seeking a Senior Security Engineer at BambooHR, who will be responsible for designing, implementing, and maintaining security measures to protect our systems, networks, and data from unauthorized access and cyber-attacks. You will work closely with cross-functional teams to assess vulnerabilities, develop robust security architectures, and provide expert guidance on best practices in the realm of cybersecurity.

 

What You'll Do

• Security Architecture Design:
  • Collaborate with other teams to design and implement robust security architectures for systems, networks, and applications.
  • Conduct security reviews and assessments to identify vulnerabilities and propose effective mitigation strategies.
• Security Operations:
  • Lead incident response efforts, investigating and resolving security incidents in a timely manner.
  • Monitor and analyze security alerts, conduct regular security assessments, and implement continuous improvement initiatives.
• Risk Management:
  • Evaluate and prioritize security risks, and develop strategies to mitigate those risks.
  • Work with stakeholders to ensure that security measures align with business objectives while maintaining a strong security posture.
• Security Policies and Compliance:
  • Develop and enforce security policies, procedures, and standards.
  • Ensure compliance with relevant regulatory requirements and industry best practices.
• Security Awareness and Training:
  • Provide training and awareness programs to educate employees on security best practices.
  • Stay current with industry trends and emerging threats to continuously enhance the organization's security posture.
• Collaboration and Leadership:
  • Collaborate with cross-functional teams, including IT, development, and operations, to integrate security measures into the development and operational processes.
  • Mentor and provide guidance to junior security team members.

What You Need to Get the Job Done

• Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
• 7 years of experience in a security engineering role, with a focus on designing and implementing security solutions.
• Professional certifications such as CISSP, CISM, or equivalent are highly desirable.
• Solid understanding of networking protocols, information security concepts, and security best practices.
• Experience with security tools and technologies, such as SIEM, IDS/IPS, firewalls, and endpoint protection.
• Excellent communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Proven ability to lead and drive security initiatives in a collaborative and fast-paced environment.

What You'll Love About Us

• Great Company Culture. We’ve been recognized by multiple organizations like Inc, Salt Lake Tribune, Glassdoor, & Comparably for our great workplace culture.
• Make an Impact. We care about your individuality by giving you freedom to grow and create within the company, regardless of your position.
• Rest and Relaxation. 4 weeks paid time off, 11 paid holidays, and we pay you to go on vacation (ask us about th