The Role

Do you have a passion for SaaS and cloud security? Are you skilled at detecting attackers and protecting cloud infrastructures and SaaS applications? We at Outreach need a senior security engineer to join our team and help us protect our platform. In this role you will own, manage, and improve the technical security controls that protect our infrastructure, products, services, and data. This role blends security analytics and engineering skills. In this role you will design, specify, deploy and operate the solutions that protect our products from attack as well as detect and respond to alerts warning of possible anomalous behavior or vulnerabilities in our systems.

You will be responsible for improving our information security operations program including working with other engineering teams to integrate security monitoring into their flows and processes. You must be comfortable working with cloud technologies and how to best leverage the security features provided by our cloud service provider or by choosing our own.

In this role, you will be working with management, technical leaders and engineers, external auditors, and at times, directly with our customers.

Your Daily Adventures Will Include

• Managing and operating the systems and technologies that detect and alert on security events across the Outreach infrastructure
• Identifying gaps in coverage of the Outreach security controls and working across teams to specify and deploy improvements that address these gaps
• Partnering with engineering teams to ensure the Outreach platform includes the right detective controls to alert on suspicious or anomalous behaviors
• Identifying, recommending, and implementing technical controls to discover and alert on indicators of compromise
• Participating and helping lead information security response activities across Outreach and its products
• Collaborating with Outreach engineering teams to research, evaluate, develop and deploy appropriate security controls that integrate with the platform and processes to protect the Outreach infrastructure and product
• Recommending and integrating security monitoring that enables engineering teams to quickly spot potential problems and respond to security events within their DevOps processes
• Interpreting the results of penetration test results and other technical audits and working across teams to champion and implement reasonable mitigations and remediations
• Creating data flow diagrams and threat models that guide design recommendations
• Translating security requirements and obligations into effective security controls
• Providing security subject matter expertise and training to teams across the company
• Ensuring cross company support for all aspects of security by establishing partnerships with other Outreach teams with the overarching goal of improving trust of Outreach and its products

Basic Qualifications

• Minimum of 7 years of experience in an information security operations and engineering role
• Extensive security operations experience
• Experience creating, implementing, and managing technical information security controls
• Experience identifying indicators of compromise in an AWS cloud environment
• Strong project management experience
• Direct experience working with SaaS cloud based applications in AWS
• Experience defining and implementing security controls for containers, microservices, and orchestration software
• Experience creating security dashboards summarizing the security health of the environment across multiple security domains (e.g., networking, host, application, identity, etc.)
• Experience operating technical controls that stand up to industry standard information security audit (e.g., ISO 27001, SOC2 and relevant security requirements)
• Have a history of successful cross-organizational efforts
• Ability to analyze problems and make appropriate decisions quickly
• Ability to drive large, complex programs and solutions using both direct and virtual teams
• Experience managing multiple external vendors across broad and complex work engagements
• Excellent interpersonal and management skills
• Strong written and verbal communication skills
• Ability to work flexibly and independently to achieve results within the dynamic Outreach culture
• Ability to maintain extreme confidentiality