Senior Corporate Security Engineer

About Attentive: Attentive® is the AI marketing platform for leading brands, designed to optimize message performance through 1:1 SMS and email interactions. Infusing intelligence at every stage of the consumer's purchasing journey, Attentive empowers businesses to achieve hyper-personalized communication with their customers on a large scale. Leveraging AI-powered tools, a mobile-first approach, two-way conversations, and enterprise-grade technology, Attentive drives billions in online revenue for brands around the globe. Trusted by over 8,000 leading brands such as CB2, GUESS, Urban Outfitters, and Pura Vida, Attentive is the go-to solution for delivering powerful commerce experiences for consumers with the brands they love.
Attentive’s growth has been recognized by Deloitte’s Fast 500, Linkedin’s Top Startups and Forbes Cloud 100 all thanks to the hard work from our global employees!
Who we areAs a Senior Corporate Security Engineer at Attentive, you will have the opportunity to design, build and deploy an enterprise security function that protects the assets that we used to “get business done”.  You stay on top of the ever changing threat landscape and know that Security is as much about technical solutions as process, education and documentation. You balance our risk tolerance with the need to go far and go fast and are a creative problem solver.   
You have a passion for problem solving, are comfortable seeing a project through from start to end, including identifying areas for improvement, researching the best way to tackle the problem, being able to describe to others why you chose the approach you did, and then implementing excellent solutions; you are both a thinker and a doer. You are creative and utilize your resources to find new ways of looking at old problems. You also love automating things, we want to work smarter, not harder!
Approach-You are a collaborative engineer who will be working closely with IT Support, IT Engineering, GRC and Security Engineering to develop and enforce security measures to safeguard our company's information assets against unauthorized access, disclosure, or misuse

Why Attentive Needs You

• You will develop and implement security measures to protect our company's information assets, ensuring compliance with security policies and procedures.
• Monitor internal and external systems for security threats, promptly respond to alerts, and take necessary actions to mitigate risks.
• Contribute to and enforce our company's IT and Security policies and procedures, ensuring adherence to industry standards and best practices.
• Work closely with our IT department to harden our infrastructure using best practices in Okta, Google Workspace, AzureAD, and other key SaaS systems
• Advise on and develop best practices for the IT Engineering function on maintaining the security of employee endpoints and network infrastructure
• Data Protection Measures: Devise novel sharing controls and associated monitoring to protect company data, including intelligent groups management and Data Loss Prevention (DLP) strategies.
• Secure Environment Creation: Employ forward-thinking models like "secure by default" and "zero trust" to create sustainably secure environments for Attentive’s enterprise users
• Vulnerability Identification and Remediation: Identify and remediate vulnerabilities in our internal enterprise systems, adhering to best practices for data security.
• Employee Education: Educate employees on the importance of data security and advise them on best practices for maintaining a secure environment.
• Security Roadmap Contribution: Contribute to Attentive Security roadmap by staying up-to-date with the latest security threats and making recommendations for improving our security posture.

About You

• 7+ years Cloud Service Providers Expertise: Familiarity with public cloud service providers such as AWS, GCP and Microsoft Azure, with a focus on implementing security measures.
• 7+ years experience with Identity and Access Management: Proficiency with identity and access management frameworks and protocols, including SAML, OAuth, and SCIM.
• 7+ years of experience with email Security Protocols Knowledge: Understanding of email security protocols and controls, including SPF, DKIM, and DMARC.
• 7+ years experience in utilizing scripting languages such as as Python, Bash, Java or similar, for automation and security-related tasks.
• Adversary Tactics Awareness: Knowledge of modern