Compensation Overview

Couchbase is seeking an exceptional security engineer to lead our security operations program. You will play a critical role in defining, building, managing, and maturing Couchbase’s capability to perform Threat Analysis, Threat Hunting, Forensics Analysis, Incident Response, Data Loss Prevention, Vulnerability Management, Penetration Testing, and Security Monitoring. This is a highly visible position and will play a key role in strengthening Couchbase’s security posture. The ideal candidate will have a strong hands-on technical background, exceptional leadership skills, and a proven ability to drive security initiatives that align with organizational goals.

This role will act as an individual contributor in a hands-on and highly technically focused position with a high impact to our Security Operations.

Roles and Responsibilities:

• Monitor and analyze vulnerabilities across company assets to detect potential threats. Responsible for detection, containment, mitigation, and protection activities to safeguard against real time threats. 
• Perform regular risk assessments, vulnerability scans, and exposure from security incidents. Implement solid incident management processes to quickly resolve incidents while collaborating with the respective stakeholders across the company.
• Responsible for architecture review, design, and implementation of all security controls in the corporate and cloud environments.
• Review, refine and mature existing security processes and tools, including but not limited to SIEM, DLP, vulnerability management, email security, end point security, penetration testing, threat hunting, threat analysis, security monitoring, and security incident response.
• Document and create baseline configurations across corporate systems and security tools.
• Partner with leaders across the Corp IT, GRC, Product Development, Cloud SRE and Legal teams to ensure that security and privacy initiatives are completed to specifications, industry standards and regulatory requirements. 
• Stay abreast of the latest cybersecurity trends, threats, and vulnerabilities; adjust security strategies accordingly.

Skills:

• Bachelor’s degree in computer science, Engineering, or Mathematics.
• 8+ years of relevant experience in information security with demonstrated experience building and managing a Security Operations Center (SOC). 
• Must have deep hands-on experience with security in public cloud platforms (AWS, Azure, GCP), Networking (Firewalls, Switches, Access Points, etc.), Operating Systems (Linux, Mac, Windows), Software Development, IAM, Key Management, Encryption, SIEM (Splunk, Rapid 7, Alienvault, etc.), DLP (Checkpoint, Proofpoint, Symantec, etc), Email Security (Abnormal Security, Mimecast, etc.), and Endpoint Security (SentinelOne, CrowdStrike, etc.) 
• Deep knowledge of network design, firewalls, switches, routers, DNS, Certs, VPN, server infrastructure, virtualization, and data centers.
• Strong understanding and knowledge of security standards/frameworks such as NIST, ISO 27001, SSAE 18, PCI, HIPAA, CIS, COBIT, OWASP etc.
• Preferable certifications such as CISSP, CISM, CISA.
• Excellent collaboration and interpersonal skills. Must be able to communicate with all levels including influencing executive leadership.
• Strong oral, written, reporting and presentation skills. Strong emphasis on process documentation.