We appreciate your interest in employment with The Honest Company! The Honest Company is committed to a policy of equal employment opportunity, and will not discriminate against an applicant or employee on the basis of race, color, religion, creed, national origin, ancestry, sex, gender, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, gender identity, gender expression, marital status, or any other legally-recognized protected basis under federal, state, or local law. Applicants with disabilities who need assistance with the application process may be entitled to a reasonable accommodation in accordance with applicable law. If you need assistance in completing this application or with the application process because of a disability, please contact the Human Resources Department at 1.888.862.8818 or 1.310.857.3020.
About Us
Founded in 2012, The Honest Company® is a mission-driven consumer products company dedicated to empowering people to live happy, healthy lives. Consumers seeking thoughtfully formulated, safe and effective baby, personal care and beauty products, along with education and support can find The Honest Company products across North America via honest.com and honestbeauty.com and at more than 17,000 retail locations. Beginning in spring 2019, consumers in Europe can find Honest Beauty at select Douglas retail locations. A leader in the natural baby category and a trailblazer in clean beauty, The Honest Company is committed to ensuring all families have access to basic necessities and the latest health information for safe growth and development — a commitment reflected in its ongoing partnerships with organizations such as Baby2Baby and Mount Sinai. The Honest Company is privately held and headquartered in Los Angeles, California.
Our Mission
We’re on a mission to empower people to live happy, healthy lives. We’re a wellness brand with values rooted in consciousness, community, transparency, and design. Every day and in every way, we hold ourselves to an Honest standard. We believe that it is our responsibility to do our part to help create a healthy and sustainable future for all.
The Role
The Honest Company is looking for a (Senior) Cyber Security Engineer to join our dynamic Technology team. In this role, you will be responsible for the overall security of the organization.This encompasses end-user awareness training, utilizing user behavioral and threat-based analytics to identify issues, reviewing on-going SOX, PCI, and other regulatory compliance, developing policies, playbooks, all while working with various business units for compliance.
What You’ll Do:
- Work closely with Software Engineering and BI teams to ensure our AWS infrastructure is secure
- Work closely with IT management to define security practices for the organization and present recommendations to both technical and non-technical team members
- Work closely with the Director of IT to help define a security strategy and roadmap
- Perform gap and risk assessments of our current organization and make recommendations on how to remediate
- Understand and explain the underlying techniques that hackers use to exploit and penetrate systems
- Maintain a strong technical background to help remedy any vulnerabilities in the organization
- Ongoing SOX and PCI compliance and familiarization of the processes
- Work closely with security vendors, regularly review logs, UBA, and other security tools and respond accordingly
- Map security findings to business impact and communicate security messaging effectively across all business units and to the leadership team
You’ll love this job if you are:
- A strong communicator and collaborator. From elevator chats to boardroom meetings, you always know the best way to communicate with others to forge effective connections.
- Dedicated and fast-moving. You’re known to operate with passion, urgency, focus, and discipline
- A talented juggler. You successfully manage competing priorities, and you make it look easy
- Results oriented and a self-starter. You love to exceed set goals and take on new projects
- The definition of integrity. You represent and inspire the highest ethical standards.
- Adaptable and ambitious. You will enthusiastically take on other assignments as needed to support your team!
What You’ll Need:
- Bachelor’s degree
- 5+ years of experience in a hands-on cyber security role
- Solid technical background in operating systems (Mac, Windows, Linux), network devices (Cisco, Palo Alto), virtualization (Vmware, Hyper-V), WAFs, and cloud technologies (AWS)
- Experience working with the following tools or equivalent: QRadar, Tenable, Evident, CrowdStrike, NetSkope, Splunk, Wireshark, DLP, CASB, and Firepower
- Familiarity with cloud computing technology (AWS, Azure, and GCP) and various means to secure them.
- Experience hardening systems. Must be able to understand different attack vectors and methods and think out of the box vs. relying on scanning tools and compliance checklists to find exploits.
- Experience analyzing an exploited system and remediating accordingly
- Monitor threat actor tactics, techniques and procedures (TTP’s).Enhance SIEM and vulnerability management program.
- Good business sense to logically think through problems and deliver a balanced approach to security
The pay range for this role is $93,000- $173,000. The range is inclusive of both mid-level and senior level. Actual compensation will depend on the level the candidate is hired into and also based on other factors including but not limited to depth of experience, skill level, ability, knowledge, education, certifications, and specific work location. This may be different in other locations due to differences in the cost of labor. The total rewards package for this position may also include base, annual incentive plan, benefits, retirement plan, equity, and Employee Stock Purchase Plan.
Benefits & Perks
We offer a competitive benefits package including comprehensive health and wellness coverage, 401k with company match, wellness incentives including a monthly fitness reimbursement and onsite fitness classes, options for education reimbursement, and a discount on all products. We value work-life balance and offer a generous and flexible vacation policy. Thinking about adding little ones to your family? Honest offers generous maternity and paternity leave. We love the furry kids too and offer pet insurance so your companions are well taken care of.
California Privacy Rights Notice for Californian Job Applicants and Prospective Talent
Effective Date: January 1, 2020
Under the California Consumer Privacy Act of 2018 (“CCPA”), The Honest Company, Inc. (“Honest” or “us” or “we”) is required to inform California residents who are our job applicants or prospective talent (together “job applicants” or “you”) about the categories of personal information we may collect about you and the purposes for which we use this information. Click here if you are a California resident to read disclosures required by the CCPA. Note this notice applies only to personal information that is subject to the CCPA.
Categories of Personal Information We Collect. We may collect the following categories of personal information about our job applicants, who are California residents:
- Name
- Signature
- Social Security Number
- Email and mailing address
- Telephone number
- Education
- Employment history
How We Use Job Applicants’ Personal Data. We use and disclose the personal information we collect for our business purposes. These business purposes include, without limitation:
- Processing evaluating your application to determine your qualifications for the role to which you’ve applied, and communicating with you about your application, including to check references or your background, and communicate with you about other jobs that may interest you.
- Other business purposes as identified in the CCPA, which include:
- Auditing related to our interactions with you;
- Legal compliance
- Detecting and protecting against security incidents, fraud, and illegal activity;
- Debugging;
- Performing services for us, such as analytics;
- Internal research for technological improvement; and
- Internal operations.
Other Interactions with The Honest Company. More information about our privacy practices can be found in our Privacy Policy, which is incorporated herein by reference.
Contact Us. For questions or concerns about our Privacy Policy, please contact us at [email protected].