Security Engineer

About WealthfrontWealthfront’s vision is to make it delightfully easy to build long-term wealth on your own terms. This vision is relevant because millions more people are getting into the market early and investing their hard earned savings in a handful of stocks. While this is a great way to start, it is inconsistent with building long-term wealth. We want to empower young investors to easily explore and execute on a wider range of investing strategies. We want to help them make informed investment decisions that are consistent with their values and beliefs while also making it effortless to grow and compound their savings exponentially. We believe that doing so will be transformational to their lives and their long-term future.
About Wealthfront EngineeringAt Wealthfront, engineering is the largest group with over 50% of the employees. Hence engineering culture permeates throughout the organization. You will work with and learn from invigorating colleagues who come from diverse backgrounds. Very few had a finance background before starting at Wealthfront.  Given our size - about 240 employees in total and about 125 employees in Engineering, you have the ability to have an outsized impact, regardless of your industry tenure. Our Banking system was designed and first developed by an engineer 3 years out of college. The Linking platform was developed by engineers with up to 6 years industry experience. When you start we will pair you up with a mentor who will guide you for as long as you want. Our culture is optimized for continued learning and automation. At Wealthfront we are builder/operators: engineers have the dual responsibility to build the system and operate the system in production, dealing with problems as they occur. This provides you direct feedback on how your code performs in production. We preach and practice automation. As an engineer, you are expected to automate any toil you encounter. No permissions required, no prioritizations expected, no questions asked. We are disciples of quality and we don’t have a separate QA organization. Engineers are expected to write automated test cases that build upon the existing test cases. For example, our investing algorithms have a dedicated suite of tests that runs full trading day simulations on a representative sample of real accounts. This testing framework allows us to test any code change against historical scenarios. If our culture of learning, the potential to have a huge impact, and our focus on quality resonates with you, then we want you!
We’re looking for a Staff Security Engineer to join our team. As part of a Wealthfront security, you will play a key role in ensuring our clients’ trust and safety while using our services.
* Note: This role has the option to be U.S.-based remote or based in Palo Alto, CA. Expectations and Responsibilities:

About the Role:

• Develop and automate security tools to enable easy integration of security into core workflows.
• Partner with DevOps, IT, Infra, and Software engineers to build security best practices into their tools and processes, so it’s easier to build features and infrastructure that meet those standards.
• Define and evangelize security policies across Wealthfront, and be comfortable presenting information and educating their colleagues on security practices and changes in a positive, engaging way.
• Stay abreast of the latest security threats and mitigations and advocate for solutions that enable us to stay ahead of the curve.
• Assess and troubleshoot security threats as they arise, and develop tools to prevent a recurrence.
• Manage security incident response and write security response playbooks.

About You:

• 4+ years in a role focused on security engineering and automation.
• 8+ years in a Software, Site Reliability, or Security Engineering role working on online systems.
• Coding ability in Go, Python, or similar.
• Experience building/using tools that implement security/audit automation.
• Comfortable coordinating the response to security events, such as responding to CVEs and internal findings.
• Comfortable detailing risks and risk mitigation strategy to leadership outside of security and defending their perspective. Can explain that some risks can be assumed, and can calibrate recommendations and priorities accordingly.
• Experience defining policy regarding security standards for teams to adhere to. This needs to cover Infrastructure, Applications, and Operational vectors. (operational being corporate-level security stuff like DLP, Auth control, leavers, malware, internal auditing, insider threat, etc.).
• Solid understanding of AWS IAM, CloudTrail auditing tools, Control Tower, and cross/multi-account policy enforcement and anomaly detection tools.

Once you join, Wealthfront will:

• Pair you with a mentor who will guide you through ou