Senior Cyber Security Engineer

Goodnotes; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Growth & wellness budgets

Office visits & global connectivity

Company offsites

Health insurance

Hybrid 4 days in-office + 18 remote 
d

Job summary

Goodnotes is seeking a Senior Security Engineer to own the security of our cloud-based platforms and services on AWS, working with a distributed team across Europe and Asia.

You will design and implement security architectures, monitor threats, lead incident response, and collaborate with engineering, legal, and QA teams to embed security into development and deployment pipelines. Experience with real-time collaboration apps is a plus.

Qualifications

• 5 years+ experience in a security engineering role with a focus on AWS environment.
• Strong knowledge and experience with security standards and frameworks (e.g., SOC2, ISO 27001, etc)
• Strong knowledge and able to write IaC for AWS security services and features, such as IAM, Security Groups, VPC, KMS, CloudTrail, and GuardDuty, AWS Control Tower
• Ability to lead new projects with a high degree of autonomy and ownership
• Experience in real-time collaborative application (i.e. Google Doc) is a plus.
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.
• Actually have hands on experience in reporting CVEs is a big plus
• (bonus): security-related certifications (i.e. AWS Security Specialist, GCP Security Specialist, etc..)

Responsibilities

• Design, implement, and maintain security architectures and strategies for AWS cloud environments.
• Monitor and analyze security alerts, logs, and reports to detect and respond to potential threats.
• Lead incident response activities and perform root cause analysis to prevent future incidents.
• Collaborate with cross-functional teams to integrate security into application development and deployment processes.
• Work with the legal team to develop and enforce policies for secure cloud operations.
• Provide expert guidance on AWS security services and features to internal teams.
• Stay up-to-date with emerging security threats, technologies, and trends.
• Setup and run bounty programs.

Skills

Security Eng

AWS

SOC2 ISO27001

IaC

Leadership

Collaboration

CVEs reporting

Security certifications

Job description

Good Systems is the parent company behind Goodnotes, where millions of people capture and develop their ideas. Goodnotes is where we started, and it’s now the foundation for a growing family of products. By reimagining how we interact with information, we’re bringing together human creativity and the breakthrough capabilities of AI. We build products that help people turn good thinking into good work.

Our Values

Dream big

Be visionary, strategic, and open to innovation

Build great things

Work in service of our users, always improving and pushing higher

Operate like an owner

Take responsibility with bold decision-making and bias for action

Win like a sports team

Be trusting and collaborative while empowering others

Learn and grow fast

Never stop learning and iterate fast

Share our passion

Share ideas and practice enthusiasm and joy

Be user obsessed

About the role

You will join a distributed team across Europe and Asia with shared time for collaboration such as planning, retros, stand-ups and brainstorming sessions. You will work alongside other iOS engineers, backend engineers, QAs and designers to improve our real-time collaboration features, which are used by millions of users around the globe. As a Senior Security Engineer in Goodnotes, you will own the security of our cloud-based platforms and services on AWS, as well as contributing to the overall security strategy of the organization.

This is the role for you, if you’re excited to work on the things listed below:

• Design, implement, and maintain security architectures and strategies for AWS cloud environments.
• Monitor and analyze security alerts, logs, and reports to detect and respond to potential threats.
• Lead incident response activities and perform root cause analysis to prevent future incidents.
• Collaborate with cross-functional teams to integrate security into application development and deployment processes.
• Work with the legal team to develop and enforce policies for secure cloud operations.
• Provide expert guidance on AWS security services and features to internal teams.
• Stay up-to-date with emerging security threats, technologies, and trends.
• Setup and run bounty programs.

The skills you will need to be successful in the above:

• 5 years+ experience in a security engineering role with a focus on AWS environment.
• Strong knowledge and experience with security standards and frameworks (e.g., SOC2, ISO 27001, etc)
• Strong knowledge and able to write IaC for AWS security services and features, such as IAM, Security Groups, VPC, KMS, CloudTrail, and GuardDuty, AWS Control Tower
• Ability to lead new projects with a high degree of autonomy and ownership
• Experience in real-time collaborative application (i.e. Google Doc) is a plus.
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.
• Actually have hands on experience in reporting CVEs is a big plus
• (bonus): security-related certifications (i.e. AWS Security Specialist, GCP Security Specialist, etc..)

Even if you don’t meet all the criteria listed above, we would still love to hear from you! Goodnotes places a lot of value on learning and development and will support your growth if needed. Candidates with less experience will be considered for a Security Engineer title.

The interview process:

• Talent Intro Call: A conversation with our Talent Acquisition team to dive into your experience, what motivates you, and why you're interested in joining Goodnotes.
• Take-home challenge: An assignment to complete online on your own time to show your skills.
• Role-Specific Assessment: A technical interview with the team, focused on the core skills for this role. A mix of in-depth knowledge questions and some hands-on challenges.
• Onsite Interview with the following:
  • Values-Based Panel Interview: A conversation with 2-3 team members centred on our company values. We'll discuss past experiences to see how your approach aligns with our culture.
• Hiring Manager Interview: A deeper dive into your professional background, your preferred ways of working, and the specific impact you'll have within the team.
• AI Literacy: As an AI-first company, we'll meet with one of our AI champions to discuss your curiosity, understanding, and practical use of AI tools in your daily workflow.

What's in it for you:

• Customized Growth & Wellness Budgets: We provide dedicated stipends for the things that keep you at your best, including noise-cancelling headphones for deep focus, professional training, personal development, and health and wellness activities.
• Global Connectivity: While we embrace flexible work, we love seeing each other. We provide sponsored visits to our beautiful office locations to foster face-to-face collaboration.
• Company-Wide Offsites: Once a year, we gather the entire global team in person to celebrate our wins, align on our vision, and build lasting connections.
• Comprehensive Health Coverage: Your well-being is our priority. We offer premium medical insurance for you and a dependent to ensure peace of mind for you and your family.
• 4 days in-office hybrid week and 18 remote working days per year: Giving you the freedom to work from a location that suits your life. Whether that's closer to family, while travelling, or simply a change of scenery to refresh your focus.

Goodnotes is committed to fostering a diverse, inclusive, and equitable workplace. We welcome applications from individuals of all backgrounds, identities, and experiences, making all employment decisions based strictly on merit, qualifications, and business needs.

Note: Employment is contingent upon successful completion of background checks, including verification of employment, education, and criminal records.

By submitting your application, you acknowledge that you have read and understood our Candidate Privacy Notice, which provides important information about the data we collect during the application process. You can find it here .