Security Engineering Team Lead

ESO; United States; Remote; USD 84,000 - 127,000; Full time

Benefits offered by this job

Training opportunities

Mentoring

Diverse international team

Job summary

ESO is building a remote Security Engineering Team Leader in Canada, collaborating with teams across Belfast, Denmark, Czechia and the United States to secure mission-critical applications used by emergency services worldwide.

You will lead Security Engineers, drive security design and implement standards across a multi-cloud environment, emphasizing defence in depth and zero trust principles.

Qualifications

• At least 5 years of experience securing software or infrastructure in cloud platforms (Azure, AWS, GCP).
• Experience with Well Architected Frameworks, e.g. Azure Well Architected Framework.
• Experience securing networks, hosts, web applications and cloud-native deployments.
• Familiarity with asset management, vulnerability management, firewalls, SIEM, PAM, IDS/IPS, EDR/XDR, DLP, SWG, WAF, CSPM, CNAPP.

Responsibilities

• Lead our team of Security Engineers and enable delivery of security consulting to the wider business.
• Work with Product & Technology teams to secure how our platform is built and how apps behave.
• Impact the security of systems used by thousands of firefighters, paramedics and hospitals.
• Be a key part of our cyber security team with demonstrable impact on security.
• Model threats using STRIDE against new designs and ensure protections are in place.
• Mitigate vulnerabilities and evaluate new security technologies.
• Respond to security and compliance issues from analysis or automated tools.
• Work cross-team to impart expertise across the organisation.
• Be in the detail, shoulder-to-shoulder with technology teams.

Skills

Threat modelling

Security architecture

MITRE ATT&CK

Cloud security

Zero trust

Tools

Microsoft Azure

AWS

GCP

SIEM

EDR/XDR

PAM

WAF

CSPM

CNAPP

Job description

HowYou’llSupport Our Mission

ESO’s teams are growing, and our software is in demand globally by firefighters, paramedics,hospitals and governments. To meet this demand, we are building an industry-leading cyber security team in Canada to protect our customers and data from a variety of fast moving and constantly evolving threats.

We are looking foraSecurityEngineering Team Leader to join ourteam in Canada, working alongside teams in Belfast, Denmark, CzechiaandtheUnited States. Work alongside our fire,hospitaland EMS Engineering teams to secure ourmission-critical applications.These applications are used to help our customers go about their daily job of protecting their communities and saving lives.

You’lllead our team of Security Engineers, supportingand directing our Product & Technology team to ensure our products andsystems are designed and implemented witha priority on security.You’llcollaborate closely with our Product & Technology teams, contributing toapplicationarchitecture and steering system implementation. Yourteamswork will draw on principles like defence in depth and leverage practices such as threat modelling and zero trust across a multi-cloud environment- with focus onbest practice,securityby design and implementation of standards andframeworksacross our portfolio.

OurSecurityEngineers have a high degree of autonomy, and are part of a high functioning, motivated and forward-thinking team.You have the chance to join adiverse,growingand passionate team, working on critical products, whilst being supported with training opportunities and mentoring.

This is a remote position, with candidates required to be based in Canada

Please note that we do not provide visa sponsorship; candidates must have full authorization to work in Canada

What You’llBe Doing– the day to day

• Lead our team of Security Engineers –assistingwith decision making and solution analysis, and enabling them to deliver security consulting to the wider business

• Work directly with, and provideescalatedsupport andguidance to,our Product & Technology teamstoassistin how our platform is built and how our applications behave; supporting everything from the security of our users inside our products to how our applications connect to the Internet.

• Have significant impact on the security of our systems that are used by thousands of fire fighters,paramedicsand hospitals worldwide.

• Be a key part of our cyber security team, withdemonstrableimpact on the security of our systemsand applications.

• Help our teams to model threats using the STRIDE model, againstnew designs, ensuringappropriate protectionand controlsare in place.

• Make a difference by mitigating vulnerabilities across our systems, helping developers to produce securecodeand evaluating new next-gen security technologies.

• Respond to security and compliance issues generated via analysis or automated tools.

• Work collaboratively cross-team,toimpart yourexpertiseacross the organisation.

• Be in the detail, working shoulder-to-shoulder with our technology teams.

Who You Are -some of theessentialthings required to be successful in the role

• At least5years’ experienceinsecuring software or infrastructure in cloud platforms (e.g.Microsoft Azure, AWS, GCP)

• Your experience should include;

• Securing systemsin linewith ‘Well Architected Frameworks’e.g.AzureWell Architected Framework

• Networkexperience– whether designing and building,managingor troubleshooting– you should haveexperienceandconfidence in your networking knowledge

• Applying security tonetworks,hosts,webapplicationsand cloud native deployments

• Working with toolsetsfrom one or more of:asset management,vulnerability management, firewalls, SIEM, PAM, IDS/IPS, EDR/XDR, DLP,SWG, WAF,CSPM, CNAPP

• A solid understanding and ideally experience in the design, implementation or run of oneor more of:SAST/DAST/IAST/RASP

You should also:

• Having knowledge ofContinuous Integration / Continuous Deploymentbestpractices, and securing pipelines

• Understand current attack tactics,techniquesand procedures along with the use of MITRE Attack frameworkand associated MITRE security research

• Be inquisitive, have a passion for what you do and understanding how your work impactsand contributesESO’s success

Who You Are–it’sdesirable if you have any of the following

• Exposure to Infrastructure as Code and Azure native technologies

• Experience with threat modelling, NIST and CIS frameworks

• Knowledge of application security standards such as OWASP Top 10, SANS / CWE 25

Benefits & Perks

ESO offers a comprehensive suite of benefits to promote health and financial security for our employees and their families.For full-time employment this includes:

• Competitive health plan (medical, dental, & vision insurance)

• RRSP with company match

• Telemedicine service provided by ESO

• Front-loaded vacation and sick time

• Employee Assistance Program (EAP)

• Peace of mind benefits such as life insurance and disability insurance

About ESO

ESO is a fast-paced, growing data, technology, and research company passionate about improving community health and safety through the power of data. We pioneer innovative, user-friendly software to meet the changing needs of today’s EMS agencies, fire departments, and hospitals. We’re small enough to be nimble and fun, but big enough to be a great place to work. We serve thousands of customers out of our offices across the US, Canada and Northern Ireland.

Are you ready to Make a Difference? At ESO, we believe in bringing your true self to work every single day. If you don’t match all the qualifications on the job description, we encourage you to apply anyway! We are looking for passionate, innovative, and authentic people to help drive our mission.

All offers are contingent upon a successful background check.

ESO is committed to creating a diverse and inclusive work environment and is proud to be an equal opportunity and affirmative action employer. We invite you to consider opportunities at ESO regardless of your gender; gender identity; gender reassignment; age; religion; race; national origin; political affiliation; sexual orientation; disability; veteran status; or other non-merit factor.

Applicant Privacy Notice – please click here to review the privacy policy which details how your data is collected, used and protected.