Security Engineer (Product / Cloud Security)

Job Description

Job Description

BlackCloak’s mission is to protect corporate executives and high-profile individuals in their personal lives, mitigating risks to their families, companies, reputation, and finances. We defend our clients’ digital lives from hackers, privacy leaks, and identity theft. If you are passionate about helping to protect others, then keep reading - this may be your next great opportunity.

As a Senior Security Engineer, you will be part of BlackCloak’s internal technology team supporting corporate security, information technology operations, and compliance. This is a critical role that is both hands-on and strategic, influencing and driving success for BlackCloak and its clients by designing, deploying, and supporting technology solutions for all areas of the business.

What you will do

• Application Security (Primary)
• Champion application security program strategy and implementation, including but not limited to various controls towards a “shift-left” security model, Security Champions program, adoption and implementation of SAST, DAST, other application security tools.
• Assist in maturation of the Secure SDLC, including threat modeling, security architecture and requirements guidance, as well as secure code development training.
• Work directly with developers to triage findings, provide remediation guidance, and foster a security-first culture.
• Manual testing support for light red teaming such as POC’ing vulnerabilities, leading penetration tests via vendor engagements and / or internally led testing, and validating security findings.
• Cloud & Infrastructure Security (Secondary)
• Partner with Engineering, DevOps, to secure GCP, AWS environments
• Leverage Cloud Security tools such as CNAAP, to remediate discovered misconfigurations, vulnerabilities, and triage of Cloud Security alerts.
• Develop and implement secure infrastructure baselines, vulnerability management processes, secrets managements, IAM, and hardening standards within the cloud environment.
• Incorporation of shift-left security tests and controls, into CI / CD pipelines
• Help expand monitoring capabilities within tools such as SIEM, CNAAP, including implementation of required cloud architecture / logging, onboarding of log sources to security tools, and detection rules for cloud-based threats.
• Zero Trust & Network Security (Support)
• Strengthen Zero Trust posture by expanding usage of Cloudflare WARP, WAF, other Zero Trust tooling and principles
• Collaborate with the IT team to enhance endpoint security policies within EDR tools such as SentinelOne, Crowdstrike, as well as secure hardening standards into MDM
• Support design and implementation of IAM best practices / principles for workforce and client identity, leveraging tools such as; Google IDP, Okta, Auth0, Zitadel
• Security Operations & Incident Response (Support)
• Review, design, and implementation of new Security Tools - support administration across tools such as SIEM, EDR, CNAAP, Email Security, and others.
• Support security and risk assessments for new tools, vendors, and relationships with broader Security and IT team.
• Assist in development of new threat detections, playbooks, and automated response / remediation
• Support triage and response of security alerts, as an escalation point from the broader team.
• Participate in supporting security on-call rotation

What You Need to be Successful

Final offer amounts are determined by multiple factors, including but not limited to geographic location as well as candidate experience and expertise, and may vary from the amounts listed above.

About BlackCloak

BlackCloak is an extremely fast-growing company in an entirely new product category. We have amazing product fit validated by industry awards and an impressive client base of Fortune 500 companies across all industries.

BlackCloak offers a competitive salary, exceptional benefits, and a dynamic work environment.  Below is a quick summary of BlackCloak’s generous benefits package for full-time employees includes :

We are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, marital status, age, disability, national or ethnic origin, military service status, citizenship, or other protected characteristic.

Learn More about Us

Website : https : / / blackcloak.io

LinkedIn : / blackcloak

Twitter : @BlackCloakCyber

White Paper : https : / / bc.blackcloak.io / quantifying -the-business-need-for-digital-executive-protection-report-download

#liremote