Senior Information Security Engineer

In the minute it takes you to read this job description, Bluecore has launched over 100,000 individually personalized marketing campaigns for our retail ecommerce customers!

In the minute it takes you to read this job description, Bluecore has launched over 100,000 individually personalized marketing campaigns for our retail ecommerce customers! And our Information Security team makes sure that each and every customer and their data remains safe and secure.

We are looking for a Senior Information Security Engineer to help us continue to ensure the safety and security of our company, our customers, and our customers’ data. This individual will support the Chief Information Security Officer in performing proactive reviews of Bluecore’s systems and data, participating in architecture reviews, identifying gaps in our security program, implementing security tooling, and responding to and investigating security incidents and alerts.

This is an ideal opportunity for a technical security engineer who might be looking to eventually move into a leadership role.

Responsibilities:

• Perform regular reviews of Bluecore’s systems and architecture to identify any security issues or areas for improvement. Conduct design reviews with engineering teams, document findings, and assist in determining the risk of those issues.
• Work cross functionally with engineering teams to correctly route remediation requests and assist in prioritizing those efforts.
• Implementation and management of security tooling, including Static Application Security Testing (SAST) tools, vulnerability identification detection tools, and endpoint detection and response tools (anti-malware).
• Monitoring of alerts and reports generated by Bluecore’s security tooling and acting as the first responder for identified incidents.
• Supporting compliance activities including privacy workflow support, external audit support, and vendor risk management.
• Assisting in the development and implementation of internal company policies.
• Supporting the IT teams in developing and implementing appropriate access management practices, onboarding and offboarding workflows, and implementing other security controls.
• Participation in security and privacy projects, technology assessments, external inquiries, and client interactions as necessary.

Requirements:

• Bachelor's Degree in an Information Systems field, or equivalent experience 
• 4+ years prior IT or Information Security administration and analysis work
• Required skills
• Previous experience with architecture reviews, design reviews, and threat modeling
• Understanding of the incident response process
• Log analysis and threat detection
• Experience with cloud computing environments including Google Cloud Platform
• Ability to write and understand code, preferably Python
• Understanding of OWASP Top 10 vulnerabilities
• Preferred skills: 
• Experience with Okta and SAML authentication mechanisms
• Prior involvement with application security functions, including vulnerability management, secure code reviews, and penetration testing
• Experience gathering evidence for compliance requirements, including SOC2 audits.
• Nice to have: 
• Previous experience as a software developer
• Experience in application security

Salary Range: $150K - 175K  

Our salary ranges are based on paying competitively for our size and industry. Salary is just one part of our total compensation package that includes equity, perks & benefits, and development opportunities at Bluecore. Individual pay decisions are based on several factors, including qualifications for the role, experience level, skillset, geography, and balancing internal equity relative to other Bluecorians. We expect that the majority of candidates who are offered roles at Bluecore to land well within our salary ranges based on these factors.

More About Us:

Bluecore is a multi-channel personalization platform that gives retailers a competitive advantage in a digital-first world. Unlike systems built for mass marketing and a physical-first world, Bluecore unifies shopper and product data in a single platform, and using easy-to-deploy predictive models, activates welcomed one-to-one experiences at the speed and scale of digital. Through Bluecore’s dynamic shopper and product matching, brands can personalize 100% of communications delivered to consumers through their shopping experiences, anywhere.