Huntress

Huntress

Staff Cloud Security Engineer

United States of America · Staff+ · Full-time

Sponsorship not specified$165k-$193kDetected 62 days ago
PythonGoSQLAWSAzureCloud PlatformsTerraformCircleCIDevOpsCybersecuritySOC OperationsDetection EngineeringIncident ResponseCollaborationMentoring

About the role

  • That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
  • We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all.
  • Huntress now secures more than 5M endpoints and 11M identities worldwide.

Responsibilities

  • This role is perfect for a hands-on engineer who is passionate about designing, building, and defending highly scalable and secure cloud environments.
  • You will be a key member of the internal product security team and help drive effective security detection and response across our production platform.
  • Secure Cloud Architecture: You will design, evaluate, and implement architectural security standards for our AWS, Azure, and PaaS cloud platforms.
  • Platform Vulnerability and Risk Management: You'll manage a robust vulnerability management program specifically tailored to our cloud environments.
  • This entails triaging high-severity alerts and coordinating with internal teams to drive mitigations or remediations.
  • Threat Detection & Response: You will develop strategies to respond to and recover from security incidents affecting the Huntress platform. You'll also implement tools, including runtime and build-level controls, to assist in threat detection and prevention.
  • Own Security Compliance: This role will have the primary responsibility of owning cloud security controls end-to-end, including the design, monitoring, and remediation of control failures.
  • That's why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC).
  • As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.

Requirements

  • SaaS Background: You have experience working within a fast-paced SaaS company and understand the unique security challenges of a cloud-first environment.
  • A Security-as-Code / Infrastructure-as-Code Mindset: You are comfortable with IaC tools such as Terraform / Spacelift, as well as other engineering tools such as CircleCI and Git.
  • You are comfortable reading cloud configurations and understanding architecture from the code up.
  • Proficiency with Scripting: You are comfortable with a scripting language in order to get things done.
  • Team Player: You are an effective collaborator and communicator both cross-functionally and functionally.
  • Deep Cloud Expertise: You possess extensive knowledge of AWS and/or Azure and other cloud platforms, with demonstrated expertise in designing secure cloud, application, and system architectures.
  • You are intimately familiar with cloud-native security tooling, logging, identity management, and security policy.
  • Incident Response Knowledge: You have a working knowledge of incident response processes and strategies and are familiar with computer forensic tools and methods.
  • You are familiar with a query language (jQL, SQL, Splunk, etc.) and are comfortable combing through datasets during an incident.
  • You have experience working within a fast-paced SaaS company and understand the unique security challenges of a cloud-first environment.
  • To The Team:
  • Flexible Security Mindset: You approach security as a business enabler, with a passion for striking the right balance between security, usability, and agility. You bring a measured, risk-based approach to solving security risks and challenges.
  • Value Documentation: You recognize documentation as a critical tool for showing impact and value. You effectively detail security recommendations, process improvements, architectural decisions, and innovative ideas to ensure clarity and organizational buy-in.
  • A Security-as-Code / Infrastructure-as-Code Mindset: You are comfortable with IaC tools such as Terraform / Spacelift, as well as other engineering tools such as CircleCI and Git. You are comfortable reading cloud configurations and understanding architecture from the code up.
  • Proficiency with Scripting: You are comfortable with a scripting language in order to get things done. Whether that is Python or Go, or something else entirely, you leverage scripting to parse data or comb through logs efficiently.
  • Deep Cloud Expertise: You possess extensive knowledge of AWS and/or Azure and other cloud platforms, with demonstrated expertise in designing secure cloud, application, and system architectures. You are intimately familiar with cloud-native security tooling, logging, identity management, and security policy.
  • Incident Response Knowledge: You have a working knowledge of incident response processes and strategies and are familiar with computer forensic tools and methods. You are familiar with a query language (jQL, SQL, Splunk, etc.) and are comfortable combing through datasets during an incident.
  • Remote-First Collaboration: You are an excellent communicator, capable of thriving and driving initiatives in a distributed, asynchronous work environment.

Skills

  • Please note that non-accommodation requests to this inbox will not receive a response.

Compensation

  • Range: $165,000 to $193,000 base plus bonus and equity
  • Annual allowance for education and professional development assistance

Benefits

  • Generous paid time off policy, including vacation, sick time, and paid holidays
  • 12 weeks of paid parental leave
  • Highly competitive and comprehensive medical, dental, and vision benefits plans
  • Life and Disability insurance plans
  • Stock options for all full-time employees
  • One-time $500 reimbursement for building/upgrading home office
  • Annual allowance for education and professional development assistance
  • $75 USD/month digital reimbursement

Company info

  • Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations.
  • Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes.
  • Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence.
  • Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
  • Product Security: Huntress is a B2B SaaS company providing a range of cybersecurity services to our partners and customers.
  • A requirement for this role is having worked at a B2B SaaS company that provides cloud-hosted services to customers.

This listing is sourced directly from Huntress's careers page and normalized into a canonical job model.