Security Architect

We’re looking for a Security Architect to develop and implement security solutions across our cloud-based platform. At data.world, you’ll work inter-departmentally to identify and correct flaws in the company's security systems, solutions, and programs while recommending specific measures that can improve the company's overall security posture. Reporting to the Chief Security Officer,

At data.world, you will:

• Deploy security tooling, such as firewalls, intrusion detection/prevention systems, antivirus software, and vulnerability scanning tools
• Design and implement a strong patch management program across multiple layers (OS, applications, etc.)
• Design an effective DevSecOps model that includes solutions such as SAST/DAST and enhancements to existing CI/CD
• Implement network and configuration changes to cloud environments and advise our engineering organization on security best practices
• Take a lead role in incident response including forensics and containment efforts
• Implement a proactive investigation and response system for security events
• Gather information for response to security certifications audits and requirements, including automation of compliance activities
• Develop and maintain regular reports on data.world’s security posture
• Perform internal security assessments and coordinate external security reviews

Required Technical and Professional Expertise:

• 5+ years experience in information security technology
• Experience working with industry frameworks such as ISO 27001, SOC 2
• Inspire, educate/technical leadership / mentorship
• Strong understanding of security architecture principles, technologies, and best practices
• Excellent verbal and written communication skills, interpersonal, and teaching skills
• Good anticipation, analytical, and problem-solving skills
• The ability to remain current on the latest technology and best practices, including a network with other information security professionals.
  

Preferred Technical and Professional Expertise:

• Advanced training certifications such as CISSP, CISM, or SANS GIAC
• Experience designing and/or architecting a FedRamp-compliance program
• History of design and implementation of networking and security configuration on Amazon Web Services
• Experience with Infrastructure-as-Code technologies such as Cloudformation and Terraform
• Experience with secure application containerization
• An appetite to try new things. You’re curious and excited to improve your process, and always looking to learn. You ask questions and don't shy away from challenges.

Perks and benefits:

• Competitive compensation with generous bonus program
• Fully paid health, vision, and dental insurance premiums for your entire family
• Company-paid life insurance, short and long-term disability insurance, and legal coverage
• Remote-forward, super flexible, casual, and enjoyable environment with open PTO
• Charitable donation matching and community philanthropy opportunities
• Wellness programs catered to individual needs
• Quarterly headquarters events - all employees welcome
• An awesome group of smart and determined coworkers, including a tight-knit team of startup veterans with integrity, passion, and senses of humor
• Your own Sparkletar owl character - have you seen them yet?

If you have the exceptional combination of skills and qualities that we are looking for, then we’re excited to meet you!

Note: We encourage people from underrepresented groups to apply. data.world is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

We are the world’s largest collaborative data community and we very much believe that our people need to represent the very diverse nature of the community we are serving and customer base we are winning. We believe that diversity leads to the most creative discussions, ideas, and outcomes.

Drug-Free Workplace

data.world is committed to providing a safe, healthy, and productive work environment. Consistent with this commitment, it is the intent of the Company to maintain a drug-free workplace.