at EDB in Springfield, Illinois, United States
Job Description
A Little About Us
EDB provides a data and AI platform that enables organizations to harness the full power of Postgres for transactional, analytical, and AI workloads across any cloud, anywhere. EDB empowers enterprises to control risk, manage costs and scale efficiently for a data and AI led world. Serving more than 1,500 customers globally and as the leading contributor to the vibrant and fast-growing PostgreSQL community, EDB supports major government organizations, financial services, media and information technology companies. EDB’s data-driven solutions enable customers to modernize legacy systems and break data silos while leveraging enterprise-grade open source technologies. EDB delivers the confidence of up to 99.999% high availability with mission critical capabilities built in such as security, compliance controls, and observability. For more information, visit www.enterprisedb.com
Candidate Note: This position is 100% remote for candidates based in the US****
We’re seeking a highly skilled and experienced Staff Security Engineer to join our dynamic Security Operations team. As a key member of our security engineering function, you will play a critical role in ensuring the security and reliability of our infrastructure and applications. You will work closely with cross-functional teams to integrate security best practices into our DevOps processes, fostering a culture of security awareness and continuous improvement.
The EDB Security Operations team provides frontline security protection for EDB, our employees, and our customers. In addition to threat detection and incident response, we engineer security solutions to improve security outcomes across the business.
Your impact will be :
In this role, you will design and implement elegant security solutions that seamlessly integrate with our DevOps practices. You will serve as a technical leader, collaborating with peers across development, operations, and product teams to incorporate security at every stage of their workloads. Some of your key areas of focus will be:
+ Infrastructure Security: Design, implement, and maintain secure infrastructure solutions spanning multiple Cloud providers and on-prem datacenters
+ Automation and CI/CD: Develop and enhance automation frameworks and CI/CD pipelines with a focus on security, ensuring secure deployment practices across all stages of the development lifecycle
+ Threat Modeling: Conduct threat modeling and security assessments to identify potential vulnerabilities and threats in our infrastructure and applications
+ Monitoring and Incident Response: Implement and manage security monitoring tools, and lead incident response efforts to swiftly address security events and vulnerabilities
+ Collaboration: Work closely with development, operations, and product teams to integrate security controls and practices into the DevOps workflow
+ Compliance and Standards: Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC 2, GDPR) and contribute to internal security policies and standards
+ Mentorship and Leadership: Provide technical leadership and mentorship to junior security engineers, fostering a culture of security excellence and continuous learning
+ Innovation: Stay current with emerging security technologies and trends, and proactively propose innovative solutions to enhance our security posture
What you will bring :
+ Experience: Minimum of 8 years of experience in security engineering, with a strong focus on DevOps practices and infrastructure security.
+ Technical Expertise: Proficient in cloud platforms (AWS, GCP, Azure), containerization (Docker, Kubernetes), and infrastructure-as-code (Terraform, CloudFormation).
+ Security Tools: Hands-on experience with security tools such as SIEM, IDS/IPS, vulnerability scanners, and DAST/SAST tools.
+ Programming Skills: Strong scripting and programming skills (Python, Go, Bash) for automating security processes.
+ Problem-Solving: Excellent analytical and problem-solving skills, with a proactive approach to identifying and mitigating security risks.
What will give you an edge :
+ Leadership Experience : Proven experience leading security initiatives and projects within a large-scale, fast-paced environment.
+ Deep Knowledge : In-depth understanding of network security, container security, and secure software development practices.
+ Communication Skills : Exceptional communication and collaboration skills, with the ability to articulate complex security concepts to technical and non-technical stakeholders.
+ Continuous Improvement : Demonstrated ability to drive continuous improvement in security processes and DevOps practices.
Compensation Range (DOE/Location): $175-225k max base + annual bonus
EDB is committed to supporting our employees’ overall well being by offering a range of benefits and resources to promote a healthy work-life balance and wellness. We provide access to Modern Health to aid employees in health and wellness tips and practices, as well as Wellness Fridays extending to December 2024! Check out our career site for more information on perks and benefits and reach out to our Talent Acquisition team for region specific benefits.
We know it takes a unique mix of people and skills to help us in our mission to supercharge Postgres, and we understand that not everyone will check every box. We’d love to hear from you and we want you to apply!
EDB is proud to be an equal opportunity workplace. We celebrate diversity and are committed to creating an inclusive environment for all employees. EDB was built on a commitment to trust and respect each other and to embrace an array of people and ideas. These values remain at the center of our culture and are key to our company’s integrity.
EDB does not seek or accept unsolicited resumes or CVs from recruitment agencies. EDB and its affiliates are not responsible for, and will not pay, any fees, commissions, or any other similar payment related to unsolicited resumes or CVs except as required in a written signed agreement between EDB and the recruitment agency or party requesting payment of a fee.
\#LI-Remote #BI-Remote