About Unit 21:

Unit21 protects businesses against adversaries engaging in money laundering, fraud, and other sophisticated risks by offering a no-code toolset to model, detect, and remediate suspicious activity. We are backed by investments from Google, Tiger Global, ICONIQ, Diane Greene (Google / Google Cloud), Jack Dorsey (Block / Twitter), William Hockey (Plaid), among others.

About the role:

As a Senior Infrastructure Security Engineer in Unit21,  you will bring your technical expertise to develop, own, manage, and improve the application security controls that protect our products, services, and data. This role blends security leadership, engineering and analytical skills. We want you to help design, specify, deploy and operate the solutions that protect our products from attack as well as detect and respond to alerts warning of possible anomalous behavior or vulnerabilities in our systems. You will be responsible for working with product and engineering teams to integrate application security monitoring into their flows and processes, as well as baking security reviews into our product development lifecycle.

Technical Fluency - Significant experience on an internal security team, or building security products.

A passion for security and technology, and familiarity with Python.

Advisory Skills - Giving direction, advice and support that helps grow the technical and collaboration skills of the individuals and teams with which they engage.

Execution - Planning, coordination, managing dependencies and risks, diving deep when issues arise.

What you’ll be doing:

• Partnering with engineering teams to design, build, select and implement effective security controls to detect and alert on security events 
• Design, architect, and implement defensive security controls across endpoints (MacOS, Windows), servers (Linux), and SAAS/self-hosted applications.
• Provide security domain expertise on protective controls, to include system, network, encryption, and authentication services.
• Collaborate with engineering teams to improve security for identity access and management (IAM), device management, and public cloud service providers (e.g. Amazon AWS, Google GCP, Microsoft Azure).
• Identifying gaps in coverage of the Unit21 security controls and working across teams to specify and deploy improvements that address these gaps.
• Managing the external firms that conduct security and privacy related compliance assessments (SOC 2, GDPR, CCPA) on our company.
• Writing code where needed to deploy new security, privacy, and access control capabilities.
• Providing security subject matter expertise and training to teams across the company.

What we’re looking for:

• 4 year of experience as DevSecOps or infrastructure security engineer
• Experience with public cloud service providers (e.g. Amazon AWS, Google GCP, Microsoft Azure).
• Experience with Infrastructure as Code (IaC) like Terraform or CloudFormation.
• Experience with CSPM tools like Lacework or Wiz.
• Experience creating, implementing, and managing technical information security controls including developing security incident response processes and teams.
• Demonstrated history of successful cross-organizational efforts.
• Ability to drive large, complex programs and solutions using both direct and virtual teams

Compensation:

The standard base pay range for this role is $155,00.00 - $175,000.00 Annually. This base pay range does not include variable compensation including potential commissions, bonuses or other financial or equity incentives. 

#BI-Remote