Security Engineer

What you’ll do:

• Configure, tune and  automate security tools to enable easy integration of security into core workflows.
• Partner with DevOps, IT, Infra, and Software engineers to build security best practices into their tools, coding practices, and processes, so it’s easier to build features and infrastructure that meet those standards.
• Define and evangelize security policies across Wealthfront, and be comfortable presenting information and educating both technical and non-technical colleagues on security practices and changes in a positive, engaging way.
• Stay abreast of the latest security threats and mitigations and advocate for solutions that enable us to stay ahead of the curve.
• Assess and troubleshoot security threats as they arise, and develop tools to prevent recurrence.
• Conduct security incident response and write security response playbooks.

What We're Looking For:

• 4+ years in Software, Site Reliability, or Security Engineering
• Experience building/using tools that implement security/audit automation
• Comfortable coordinating security responses to CVEs and reported findings
• Comfortable detailing risks and mitigation strategies to leadership across the company
• Solid understanding of AWS IAM, CloudTrail auditing tools, and cross/multi-account policy enforcement and anomaly detection tools

Bonus Points:

• 1+ years in a role focused on security engineering and automation
• Experience on an agile scrum engineering team
• Coding ability in Go, Python, Java, BASH, or similar
• Experience enforcing internal enterprise, infrastructure, and application security policies
• Experience working in both on prem and cloud hybrid environments
• Infrastructure automation experience, using Terraform, Ansible, CloudFormation, or similar