Senior Security Engineer

About mParticle

mParticle is widely recognized as one of the leading customer data platforms, serving hundreds of global brands and helping them turn data to insights, and insights to action. Built on top of end to end streaming architecture, we are committed to empowering businesses to deliver personalized and engaging experiences to their customers across all screens and devices. We believe that the opportunity to help teams activate insights from their customer data to deliver more personalized and adaptive experiences is more important than ever.

We at mParticle choose to create a company that is as diverse and inclusive as the world we live in by attracting, growing & keeping the best talent. Employment opportunities are available to all applicants without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

About the job

Security is of paramount importance at mParticle and is baked into everything we do. We are looking for a highly skilled Senior Security Engineer to help us continue to iterate and innovate quickly while maintaining the highest standards of security.

Our clients include marketing and engineering functions for some of the largest mobile apps and sites in the world and our platform processes nearly one third of the world’s smartphone traffic.

We value both breadth and depth of knowledge and you will have the ability to influence every area of our security posture. Our ideal candidate will have well-rounded security knowledge, strong software engineering skills, and an ability to think both defensively and offensively.

About the Candidate

The Successful candidate will:

• Be a security subject matter expert across the business
• Collaborate with other engineers in security code reviews to identify and fix issues in our applications
• Develop tooling to automate manual security processes
• Lead security-related projects from inception to successful completion
• Perform hands-on internal assessments of both the mParticle platform and our infrastructure
• Perform incident response, remediation, and forensics services when required
• Assist the compliance team to ensure continued compliance with SOC 2 and ISO 27001

Is this opportunity right for you? We are looking for candidates who have:

• Minimum of four (4) years prior experience in a security engineering role
• Solid understanding of the OWASP Top 10 such as SQLi, XSS, CSRF, and business logic flaws across large code bases
• Strong knowledge of cryptography principles and authentication infrastructure (e.g. SAML, oAuth)
• Experience with securing and monitoring AWS or similar cloud environment
• Performed hands-on security threat modeling, risk assessment, and operational security analysis
• Prepared and presented detailed, written and verbal technical information for both internal and external audiences
• Security assessment experience, penetration testing, incident response, forensics, network traffic analysis either internally or as a consultant
• Experience with Security architecture and risk mitigation
• Cloud/Enterprise IT administration (configuration, patching, deployment, change management)
• A passion for working in an environment where DevSecOps principles are practiced
• Relevant industry certifications are a bonus (CISSP, SANS/GIAC, CompTIA, Microsoft, Linux, Cisco)
• If you feel that you meet 70% of these requirements please consider applying as we will review your resume

The ideal candidate will/have/be:

• Industry experience is desired, with familiarity in mobile, data-driven marketing and SaaS solutions for marketing.
• Ability to set and execute on priorities within a fun and fast-paced environment.
• Excellent collaborator, with the ability to engage across multiple teams to drive an outcome.

Perks & Benefits

• We offer a holistic benefits package that includes comprehensive health care coverage, encompassing medical, dental, and vision, fully covered by the company for employees enrolled in our baseline plan. Additionally, we extend cost-effective sharing options for dependents, ensuring accessibility to necessary care for you and your loved ones while maintaining affordability for all. Our commitment to well-being also includes Mental health resources through Modern Health and pet insurance for our furry friends.
• A truly adaptable work setting with flexible time off, 11 paid company holidays, and quarterly mental health reboot days in a 100% remote environment. 
• An ownership culture where individuals