Staff Security Engineer

Primer.ai; Washington (District of Columbia); On-site; USD 175,000 - 235,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Remote work stipend

Wellness days

Paid parental leave

Job summary

Primer.ai is seeking a Staff Security Engineer to join the IT and Information Security teams. You will protect sensitive data by implementing and monitoring a secure cloud architecture and lead DAST and SAST initiatives, incident response, and vulnerability management.

You will collaborate with DevOps and development teams to embed security into SDLC and DevSecOps, automate security controls, and stay ahead of threats. We offer strong compensation, comprehensive benefits, and flexible policies.

Qualifications

• 10+ years of security and/or cloud operations experience.
• Strong written and oral communication skills.
• Hands-on AWS experience.
• Experience with intrusion prevention systems.
• Experience with system logging and SIEM technologies.
• Experience with cloud-native security tools (IAM, WAF).
• Experience integrating Okta as IdP into security processes.
• Knowledge of incident response processes and practices.
• Experience vulnerability management tools and methods.
• Proven ability to integrate security into IT and/or DevOps environments.
• Experience automating security processes.

Responsibilities

• Analyze the organizational security posture and seek improvements on a continuous basis.
• Implement and manage security solutions and controls for cloud-based infrastructure, platforms, and applications.
• Conduct security assessments and audits of cloud environments to identify and remediate vulnerabilities and misconfigurations.
• Manage and optimize cloud-based security tools (e.g., EDR solutions).
• Respond to security alerts and conduct root cause analysis.
• Perform incident response and track actions from detection to resolution.
• Work with IT to broaden the Zero Trust framework.
• Collaborate with DevOps and development teams to integrate security into SDLC/DevSecOps.
• Automate security solutions to drive continuous compliance across the infrastructure.
• Stay up-to-date with threats and recommend security enhancements.

Skills

AWS

Intrusion prevention

SIEM technologies

Okta IdP integration

Vulnerability management

DevSecOps

Automating security

Incident response

Cloud security practices

Tools

Okta IdP

IAM

WAF

SIEM

Job description

Primer exists to make the world a safer place. We do this by providing trusted decision-ready AI to the world's most critical organizations. Our software enables leaders, operators, and analysts to better understand the changing world around us in real time and make informed decisions when the stakes are high. Primer has offices in San Francisco, Pasadena, CA and Arlington, VA. For more information, please visit https://primer.ai/

As a Staff Security Engineer, you will be a valuable member of the IT and Information Security teams, managing and improving the organizational security posture. You will help protect sensitive data by implementing and continuously monitoring a secure cloud architecture. You will work with the security toolchain in cloud environments and support the development of security best practices and standards. Your responsibilities will also include managing vulnerability scanning and remediation efforts, responding to security alerts under supervision, and leading in root cause analysis. You will own the DAST and SAST solutions and be a key member of the incident response processes, tracking cyber actions from initial detection to final resolution.

Role Responsibilities - How You Will Make an Impact

• Analyze the organizational security posture and seek improvements on a continuous basis
• Implement and manage security solutions and controls for cloud-based infrastructure, platforms, and applications
• Conduct security assessments and audits of cloud environments to identify and remediate security vulnerabilities and misconfigurations
• Manage and optimize cloud-based security tools (e.g., EDR solutions)
• Respond to security alerts and conduct root cause analysis
• Perform incident response and track cyber actions from initial detection to final resolution
• Work with the IT team to broaden the Zero Trust framework
• Collaborate with cross-functional teams, including DevOps, IT, and development teams, to integrate security into the software development lifecycle (SDLC) and DevSecOps practices
• Automate security solutions to drive continuous compliance across the infrastructure
• Stay up-to-date with industry trends, emerging threats, and best practices in cloud security, and recommend security enhancements and improvements as needed

What We Are Looking For

• 10+ years of experience in Security and/or Cloud Operations
• Strong written and oral communication skills
• Hands-on experience with AWS
• Direct experience with intrusion prevention systems
• Experience with system logging and SIEM technologies
• Experience with cloud native security tools (e.g., IAM, WAF)
• Experience integrating Okta as an IdP into security processes
• Knowledge of incident response processes and practices
• Hands-on experience with vulnerability management tools, technologies, and methods
• Proven ability to integrate security practices into IT and/or DevOps environments
• Experience automating security processes

Nice To Have:

• Knowledge of Python and Golang
• Cloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer, or Certified Cloud Security Professional (CCSP)

The annual cash compensation range for this position is US $175,000 to US $235,000. Final compensation will be determined based on experience and skills and may vary from the range listed above.

Primer works closely with the U.S. defense and intelligence establishment. Any offer of employment is conditioned on an applicant or employee being able to meet any applicable government contract requirements. The company may rescind any offer of employment to an applicant or terminate an employee if the applicant or employee is unable to perform the functions of the position in compliance with applicable government contracts or if an applicant or employee makes a false attestation of compliance.

What We Offer

We are a series D funded company with investors from Addition, USIT, Lux Capital, Amplify Partners, Addition Capital, Bloomberg Beta, and others. We are intentional around building a diverse and inclusive team of subject matter experts to better advocate for the needs of our users.

We care a lot about our work and about the well being of our team. We encourage everyone to work at a sustainable pace and have a flexible vacation policy for team members to utilize, Wellness Days and 100% paid leave for parents of growing families.

We offer competitive compensation and comprehensive benefits. This includes full medical, dental, and vision coverage, fertility benefits through Carrot, mental health coverage on demand with Headspace Care+, Gympass+ Membership via Wellhub, One Medical Membership, 401(k), remote work stipends, and monthly internet allowance.

Primer is proud to be an Equal Employment Opportunity and Aff…

We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Please see the United States Department of Labor's EEO poster and EEO poster supplement for additional information.

If you need assistance or accommodation due to a disability, you may contact us at [e-mail].

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.