Senior Cloud Security Engineer

Iterable The cross channel marketing platform that powers unified customer experiences, and empowers you to create, optimize, and measure every customer interaction. Iterable is the top-rated AI-powered customer engagement platform that helps organizations like Redfin, Priceline, Calm, and Box to activate customers with joyful interactions at scale. With Iterable, organizations drive high growth with individualized, harmonized and dynamic communications that engage customers throughout the entire lifecycle at the right time. Iterable’s data engine, ease of use, and flexible and open architecture makes it the best platform to close the data activation gap by bringing together customer data, ability to design the experiences, deliver them and optimize them. All in one platform.How you will make an impact:Customers trust Iterable with sensitive information, expecting us to safeguard their data. Iterable's Security team leads a cross-functional effort across the company to ensure that all systems remain secure in support of Iterable's core values, and to provide assurance to our customers that we will be good stewards of their valued data. The Security team actively leads the effort to improve Iterable's security posture in concert with other groups as they develop or launch new features and services.In this role you'll get to:Review system designs and implementations, and consult with engineers across the organization to identify and/or avoid security issues through alignment with security standards and best practices, document and ensure security issues are appropriately remediated.Leverage subject matter expertise of systems and infrastructure to propose solutions and drive architectural improvements which address classes of security vulnerabilities.Develop and implement cloud and infrastructure security architecture and contribute to overall strategy and roadmap plans.Participate in the selection, design, development, implementation, and management of automated security testing tools, such as cloud security posture management and image vulnerability scanners.Promote DevSecOps principles and implement Infrastructure as Code (IaC) scanning and policy enforcement to ensure deployments via Terraform, AWS CloudFormation, or similar, are secure and compliant with standards and guidelines.Coordinate and participate in penetration tests of our cloud services.We are looking for people who have:Experience providing cloud security subject matter expertise and guidance to people external to a security team.Solid understanding of cloud security vulnerabilities defense techniques and security best practices, including AWS security practices and present-day threats.Knowledge of system and infrastructure hardening and monitoring best practices in a cloud environment.Experience with modern cloud infrastructure including EC2, EKS, Kubernetes, workload orchestration, data stores (relational DBs, NoSQL and document DBs), object stores (S3) and event streaming.Strong working knowledge of AWS services and security concepts including AWS Organizations, AWS Identity (SSO), Identity and Access Management (IAM), Service Control Policies (SCPs), Virtual Private Clouds, Elastic Load Balancers, AWS CloudTrail, and Security Groups.Proficiency in an AWS-compatible programming language, such as Python, Ruby, Java, or Go.Working knowledge of Elastic Container Service (ECS) is a plus.The US base salary range for this position at the start of employment is $129,500 - $200,000. Within this range, individual pay is determined by specific US work location, as well as additional factors, including job-related skills, experience, relevant education or training, and internal equity considerations.Iterable is an Equal Employment Opportunity employer that proudly pursues and hires a diverse workforce. Iterable does not make hiring or employment decisions on the basis of race, color, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender-identity, sexual orientation, disability, age, military or veteran status, or any other basis protected by applicable local, state, or federal laws or prohibited by Company policy.

#J-18808-Ljbffr