Cybersecurity Engineer (Remote)

Dscout is a flexible Experience Research Platform for capturing in-context insights from high-quality participants, bridging the gap between product teams and users. Leading brands like Sonos, Spotify, Duolingo and Best Buy use Dscout to test ideas, iterate quickly, collaborate, and build confidently. We are expanding our smart and driven team and would love for you to join us.
We are looking for a Cybersecurity Engineer to become a part of the Cybersecurity team reporting to the VP, Compliance and Information.
The Cybersecurity Engineer will contribute to reducing risk within the Dscout SaaS environment and internal IT systems. This includes planning and implementing cybersecurity controls, supporting cybersecurity operations, and monitoring the threat landscape. This role will ensure Dscout controls operate effectively over time. 

What You Will Do

• Lead the process to build security into the Dscout SaaS environment. This includes applying security throughout the software development lifecycle.
• Collaborate with Engineering to plan and implement cybersecurity controls to protect the SaaS environment. This includes applying leading practices to secure AWS resources (e.g., VPCs, EC2 instances, and containers). 
• Continually enhance security monitoring of the SaaS environment and internal IT services by implementing SIEM and working with Engineering to continuously improve logging and auditability.
• Assess evolving threats and develop recommendations to mitigate risk to Dscout. You will provide weekly threat intelligence reports highlighting potential risk to the organization.
• Work side-by-side with Engineering to analyze, contain, and mitigate cyber attacks and other related incidents.
• Perform vulnerability monitoring and, where appropriate, ensure remediation.
• Participate in the development of security policies and processes.
• Assist third party risk reviews.
• Provide recommendations to continually improve security controls.
• Assist in development of security programs and efforts to promote security awareness.

What you need to have (we can call them Desired Skills and Background):

• Experience working with developers to conduct security reviews and provide strong recommendations to manage risk. This includes a strong understanding and practical use of OWASP Top 10 (web and AI).
• Experience securing AWS cloud environments and infrastructure as code solutions such as Terraform.
• Proven ability to implement security monitoring tools such as Datadog. This includes the ability to identify relevant scenarios and ensure proper logging.
• Experience responding to cyber attacks such as bots and account compromise as well as threats like data leakage and infected computers. 
• Strong knowledge of cloud computing environments.
• Working knowledge of security in software development and continuous integration/continuous delivery (CI/CD).
• Experience documenting and implementing security policies and processes.
• Knowledge of security frameworks and standards: ISO 27001, NIST, or SANS preferred.
• Experience with HITRUST and/or SOC 2 certification is preferred.
• Good communication, documentation and presentation skills.
• Limitless curiosity and insatiable appetite to understand human behavior and relevant technologies.

Background

• Bachelor's degree is preferred
• CISSP, CCSP, or GIAC security certification preferred
• A minimum of 3 years of security experience

Of course, what is outlined above is an ideal set of expectations, but things may shift based on business needs, and other projects and tasks could be added at the discretion of your manager.
About Dscout
Dscout is a team of passionate, empathetic, and curious professionals. As a recognized leader in the Forrester Wave, we’re at the cutting edge of experience research technology. The power of research drives us—how in-context insights from real people can build more enjoyable products and services. We prioritize learning, sharing, and building. We also deeply value being a diverse and inclusive team and company and look for team members who align with that belief. Join our dynamic team and help shape product roadmaps and business strategies for the world’s most loved brands.
It doesn't stop there. When you join the Dscout team, you will get:
* A strong and competitive compensation package with a built-in bonus and equity program.* An incredible and progressive benefits package (for both you and your dependents) to support work/life balance, including flexible PTO, 16 company holidays, 12 weeks of paid parental leave, 401k match, and much more.* An education stipend to support your growth & development