Senior Security Engineer

<p><strong>Hej, Truecaller is calling you from Stockholm, Sweden! Ready to pick up?</strong></p> <p>Truecaller transformed how we communicate when we launched in 2009 in Stockholm, Sweden.</p> <p>Our mission is to build trust everywhere by making tomorrow’s communication smarter, safer and more efficient. We focus on bringing smart services with big social impacts, like protecting people from fraud, harassment, and scam calls or messages. We identify new numbers from anywhere in the world and build a space for trustworthy conversations, for those that matter. Truecaller is loved by over 350 million people around the world and is growing very rapidly across regions. </p> <p><strong>Who we are:</strong></p> <ul> <li>The world’s #1 caller ID and spam blocking service for Android and iOS.</li> <li>A team of 400 people from ~35 different nationalities, spread across our headquarters in Stockholm and offices in Bangalore, Mumbai, Gurgaon, Tel Aviv and Nairobi.</li> <li>Listed On Nasdaq OMX Stockholm, Large Cap</li> </ul> <p><strong>We, at the Security team,</strong> play a critical part in Truecaller’s continuous success and mission to build trust everywhere as we handle the overall security in each and every domain of Truecaller. Our vision is to contribute to the development of a state-of-the-art product for our users and push the boundaries of security.</p> <p><strong>As a Senior Security Engineer, </strong>your role is pivotal. you are more than just versed in security protocols but possess a blend of infrastructure knowledge, a keen interest in DevSecOps, and a passion for safeguarding cloud architectures. You understand the intricacies of Cloud Security, GCP in particular and thus suited for supporting us in integrating security seamlessly into the development life cycle. While experience matters, it's your drive, curiosity, and commitment to excellence that will set you apart in this role. </p> <p><strong>What do we expect from you </strong></p> <ul> <li>Bachelor's degree in Computer Science, Information Security, or a related field, with several years of experience in a senior engineering role focused on security.</li> <li>Proven expertise in cloud security, especially in the Google Cloud Platform (GCP).</li> <li>Comprehensive knowledge of DevSecOps and its practical application in CI/CD pipelines.</li> <li>Strong scripting and automation skills in languages such as Python, Bash, or Go.</li> <li>Experience in leading security initiatives and mentoring junior team members.</li> <li>Excellent problem-solving skills, combined with the ability to think strategically and act tactically.</li> <li>Exceptional communication skills, with the capacity to influence and guide decision-making at all organizational levels.</li> </ul> <p><strong>What will you work on</strong></p> <ul> <li>Shape and align security strategies to business objectives, ensuring security isn't just a policy but a key enabler of our services.</li> <li>Support and lead the design and implementation of advanced security architectures and solutions in our GCP environment.</li> <li>Collaborate with DevOps and engineering teams to integrate security controls into CI/CD pipelines and development workflows (DevSecOps).</li> <li>Take on vulnerability management endeavors security focusing on cloud infrastructure and applications.</li> <li>Advocate for and drive the implementation of a zero-trust approach across our digital environments.</li> <li>Provide expert advice on security matters to leadership and project teams.</li> <li>Evaluate, implement, and manage security tools that complement our defensive strategy.</li> <li>Stay ahead of emerging security threats and trends, and proactively recommend and implement security enhancements.</li> </ul> <p><strong>It would be great if you also have</strong></p> <ul> <li>Advanced Certifications: Credentials like CISSP, GCP Professional Security Engineer, or CEH can be advantageous.</li> <li>Open-Source Contributions: Experience with contributing to open-source security tools or projects showcases initiative and expertise.</li> <li>Machine Learning and AI: Familiarity with leveraging AI and ML for security analytics and threat detection.</li> <li>Zero Trust Network Architecture: Understanding and experience in implementing Zero Trust concepts beyond just theoretical knowledge.</li> <li>Soft Skills: Exceptional communication abilities, especially in translating technical jargon into understandable concepts for non-technical stakeholders.</li> <li>Container Security: Experience in securing Docker, Kubernetes, or other container orchestration platforms.</li> <li>Threat Modeling: Experience in developing threat models for complex software and infrastructure architectures.</li> <li>Digital Forensics: Skills in identifying and investigating digital traces after a security incident.</li> </ul> <p><strong>Life at Truecaller - </strong>Behind the code:<strong>  </strong><a href="https://www.instagram.com/lifeattruecalle