Job Summary

As Togetherwork's Senior Security Engineer, you will be responsible for the operational capabilities of the team. The position will primarily focus on managing the Security tools and procedures used across the Togetherwork portfolio of products. The Security Engineer will be expected to perform work requiring broad knowledge of good security across many different tools and Security domains. Specific areas of responsibility for a Security Engineer include:

• AWS Cloud Infrastructure Security
• Firewall Management
• Web Application Security
• Vulnerability Management
• Incident Response
• Log Management

Responsibilities

• Set up and install any relevant security tools, such as SIEM or scanner agents, as needed for all operating systems.
• Maintain and manage the Vulnerability Management program.
• Perform regular vulnerability assessments as needed for compliance as well as general security analysis.
• Perform regular code audits for company applications.
• Create, maintain, and utilize tools to standardize and automate common tasks related to the information security team.
• Work with other internal and external IT teams to migrate and secure cloud environments.
• Triage, report, and assist with security incidents in correspondence the incident response plan.
• Perform regular monitoring and reporting for relevant compliance objectives.
• Advise and lead the incident response process on remediation action in accordance with the incident response plan.
• Communicate and manage relationship with security related vendors, as necessary.
• Conduct regular security reviews as needed across departments.
• Other Security related duties as needed.

Requirements

• 5- years of relevant IT Security experience.
• Advanced knowledge of networks and network protocols.
• Advanced knowledge of AWS Cloud Security
• Experience with Incident Response in cloud environments
• Advanced programming knowledge with the ability to automate tasks (Python, PowerShell, etc.).
• Expert knowledge of log analysis including understanding how to efficiently parse and analyze logs.
• Practical knowledge of network analysis tools such as tcpdump and wireshark.
• Advanced understanding of how Firewall/IDS/IPS/AV technologies work and how to configure them in a broad sense.
• Advanced understanding of vulnerability severity standards as categorized by NIST, PCI DSS, or OWASP.
• Advanced understanding of web application security standards defined by OWASP.
• Advanced understanding of PCI DSS and SOC2 requirements and how to execute related compliance objectives.
• Strong technical documentation skills for creating reports related to information security.
• Security certifications such as from GIAC, AWS, ISACA, (ISC)²
• Experience in System Administration of Linux/Unix and Windows systems.

Excited about this role but don't meet every single requirement?Studies have shown that women and other marginalized groups are less likely to apply to jobs unless they meet every single qualification. At Togetherwork we are dedicated to building a diverse, inclusive, and authentic workplace, so if you're excited about this role but your past experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.

The Company offers a comprehensive employee benefits program, including:

• Medical, dental, and vision insurance options
• 100% Employer paid short/long term disability
• Basic Life
• 401(k) option with 100% company match
• Flexible paid personal/vacation time built on mutual trust and accountability
• 10 sick days annually
• 10 company paid holidays
• 6 weeks paid parental leave

Inclusion and Diversity:Togetherwork is an Equal Employment Opportunity Employer. We are a company where diverse backgrounds, experiences and viewpoints are valued. Togetherwork does not make hiring or employment decisions on the basis of race, color, religion, gender, gender identity, sex, sexual orientation, disability, veteran status, age, ethnic or national origin, or any other basis protected by all local, state or federal laws.

Salary Range Disclosure

The base range represents the low and high end of the Togetherwork salary range for this position. Actual salaries will vary and may be above or below the range based on factors including, but not limited to location, experience, and performance. The range listed is just one component of Togetherwork's total compensation package for employees. Other rewards may include discretionary bonuses, long term incentives, a flexible paid vacation/personal time policy, 6 weeks paid parental leave and more.

Salary Range

US Remote: $95,000 - $105,000 USD per year

Togetherwork provides integrated software and financial solutions to a wide range of communities and organizations including associations, camps, unions, fraternities & sororities, gyms, dance studios, religious congregations, pet services, and more.

Our mission-critical tools help our customers manage and grow their communities, and enhance the depth and breadth of their member engagement. Our team is united in its desire to help our clients better serve and empower their communities.