Senior Security Engineer

Veeva Systems, Inc.; Columbus (OH); Remote; USD 100,000 - 180,000; Full time

Job summary

A pioneering company in life sciences, Veeva Systems seeks a Security Engineer to enhance its security solutions. The role involves collaborating with development teams, integrating security tools, and ensuring compliance with industry standards. With a focus on a flexible work environment, Veeva offers competitive compensation, professional growth, and a commitment to employee success.

Benefits

Medical, dental, and vision insurance

Flexible PTO and company paid holidays

Retirement programs

1% charitable giving program

Qualifications

• 5+ years in an Information Security role managing security tools.
• Experience with cloud service providers, preferably AWS.
• Advanced knowledge in security engineering and protocols.

Responsibilities

• Implement security tools such as IDS, IPS, and WAF.
• Analyze alerts and tune to eliminate false positives.
• Write code supporting data lake and transformation processes.

Skills

Information Security

Automation

Python

Cloud Security

Network Security

Education

Bachelor’s degree or higher in a relevant field

Tools

AWS

OSWAP

NIST 800-53

SANS Top 20

Job description

Veeva Systems is a mission-driven organization and pioneer in industry cloud, helping life sciences companies bring therapies to patients faster. As one of the fastest-growing SaaS companies in history, we surpassed $2B in revenue in our last fiscal year with extensive growth potential ahead.

At the heart of Veeva are our values: Do the Right Thing, Customer Success, Employee Success, and Speed. We're not just any public company – we made history in 2021 by becoming apublic benefit corporation(PBC), legally bound to balancing the interests of customers, employees, society, and investors.

As aWork Anywherecompany, we support your flexibility to work from home or in the office, so you can thrive in your ideal environment.

Join us intransforming the life sciences industry, committed to making a positive impact on its customers, employees, and communities.

The Role

Veeva’s Security Engineering team is seeking a talented Security Engineer to help with onboarding security solutions for the Veeva product teams. You will be working with development teams to help install and tune various security tools to ensure holistic security and accurate reporting. Python development will be required for integrating solutions with our security data lake and to develop other custom tools as needed.

In addition to tuning the tools, you’ll also work with other security team members and development teams on RFIs for new security tool evaluations. You’ll be responsible for ensuring that future security tools meet the needs of Veeva.

What You'll Do

• Work with development teams to implement security tools such as IDS, IPS, FIM, and WAF.
• Analyze security tool alerts and work with teams to tune the alerts to eliminate false positives.
• Write code supporting data lake, data warehouse collection, and data transformation processes.
• Perform code reviews on code written by the security team.
• Application development/scripting with Python, or other another language.
• Maintain security infrastructure, tools, and systems.
• Document best practices, user/process/implementation guides, etc.
• Mentor other security engineers.

Requirements

• 5+ years in an Information Security role managing security tools and infrastructure.
• Experience maintaining automation scripts to streamline security processes
• Software development experience using Python.
• Experience with cloud service providers, preferably AWS and its various technologies and APIs.
• Advanced knowledge and understanding in various disciplines such as security engineering, system and network security, authentication, and security protocols.
• Understanding of OSWAP Top 10, SANS Top 20, NIST 800-53, CIS, CSC, or other security standards
• Technical skills to translate business requirements into terms that developers can understand
• Bachelor’s degree or higher in a relevant field.

Nice to Have

• Master of Science in Cyber Security, Information Security, MIS, or equivalent
• Certifications: CISSP, CCSP, AWS Solutions Architect / Security
• Hands-on cloud security experience (IAM permissions and infrastructure security)
• Hands-on network security experience (firewalls, runtime application self-protection, NAC, 802 .1x, IPS, malware detection, etc. )
• Experience with incident response technologies, signature development & analysis of false positive alerts
• Experience with web application security testing tools and techniques (SAST, DAST, SCA, fuzzing, etc.)

Perks & Benefits

• Medical, dental, vision, and basic life insurance
• Flexible PTO and company paid holidays
• Retirement programs
• 1% charitable giving program

Compensation

• Base pay: $100,000 - $180,000
• The salary range listed here has been provided to comply with local regulations and represents a potential base salary range for this role. Please note that actual salaries may vary within the range above or below, depending on experience and location. We look at compensation for each individual and base our offer on your unique qualifications, experience, and expected contributions. This position may also be eligible for other types of compensation in addition to base salary, such as variable bonus and/or stock bonus.

#LI-Remote

Veeva’s headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world.

Veeva is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristics protected by local laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us [e-mail].