Cloud Security Engineer

EquipmentShare is hiring a Cloud Security Engineer

EquipmentShare is searching for a Security Engineer for the Cloud Operations team.  As a Security Engineer, you will help ensure that new and existing cloud infrastructure is designed and implemented in a way that follows community preferred security practices as well as respond to security related incidents helping to resolve the issue, perform forensics and impact analysis, write post-mortems, and provide guidance for short and long term remediation.  You will also help us design and implement policies, procedures, and runbooks for incident response as well as helping to develop security guidelines for software development teams.  The ideal candidate will have a broad understanding of software development practices, experience with Amazon Web Services (AWS), familiarity with various security related compliance standards, and 4+ years of experience in the field.

Your role in our team

At EquipmentShare, we believe it’s more than just a job, we invest in our people and encourage you to choose the best path for your career. It’s truly about you, your future and where you want to go. We are looking for a Security Engineer to help us continue to build the next evolution of our platform in a secure, scalable, performant and customer-centric oriented architecture. Our main tech stack includes : AWS, Managed Kubernetes (EKS), Python, Aurora RDS PostgreSQL, DynamoDB, Kafka, Kinesis, React, Node.js, and Typescript. We currently implement security, alerting, and monitoring tools including AWS GuardDuty, AWS WAF, Lacework cloud-native application protection platform, DataDog, and PagerDuty.

What you'll be doing

We are typically organized into agile cross-functional teams composed of Engineering, Product and Design, which allows us to develop deep expertise and rapidly deliver high value features and functionality to our next generation T3 Platform.

As a Security Engineer, you will…

• Work with domain teams of software engineers who are dispersed across the United States and the United Kingdom.
• Design, develop, deploy, and maintain security automation, secure-by-default solutions that will enable developer and security engineering productivity using scripting or programming languages.
• Design and develop security policies and procedures following community preferred practices with an eye towards future compliance with standards such as SOC 2, and Federal Acquisition Regulation (FAR).
• Own, coordinate, and participate in incident response, remediation and triage campaigns taking on periodic on-call responsibilities.
• Develop, document, and implement runbooks for incident response to help streamline remediation.
• Produce incident post-mortem documentation for a variety of audiences including technical and non-technical stakeholders.
• Research and interpret vulnerability disclosures and intelligence.
• Perform security reviews including secure design and architecture, threat modeling, threat assessments, secure code reviews, and security testing.
• Identify security gaps in applications, services, and products including internally developed and third party solutions.
• Contribute to the long-term and short-term security strategy to ensure that applications are designed and built securely.
• Comfortably transition between big picture, strategic thinking and tactical day-to-day operational execution.
• Influence decision-makers and stakeholders to achieve a consistently high security bar.
• Evaluate and recommend new and emerging security products and technologies.

We'll be there to support you as you become familiar with our teams, product domains, tech stack and processes — generally how we all work together.

Who you are

You're hands-on - you enjoy solving complex problems and building impactful solutions.  Most importantly, you care about making a difference.

• Take the initiative to own outcomes from start to finish — knowing what needs to be accomplished within your domain and how we work together to deliver the best solution.
• You have a passion for developing your craft — you understand what it takes to build secure, robust and scalable solutions.
• You’ll see the learning opportunity when things don’t quite go to plan — not only for you, but for how we continuously improve as a team.
• You take a hypothesis-driven approach — knowing how to source, create and leverage data to inform decision making, using data to drive how we improve, to shape how we evaluate and make platform recommendations.

Above all, you’ll get stuff done.  More importantly, you’ll collaborate to do the right things, in the right way to achieve the right outcomes.

What we will offer you

We can promise that every day will be a little different with new ideas, challenges and rewards. We’ve been growing as a team and we are not finished just yet— there is plenty of opportunity to shape how we deliver together. Our mission is to enable the construction industry with tools that unlock substantial increases to productivity. Together with our team and customers, we are building the future of construction. T3 is the only cloud-based operating system that brings together construction workflows & data from constantly moving elements in one place.

• Competitive base salary and market leading equity package (pre-IPO).
• Unlimited PTO.
• Remote first.
• True work/life balance.
• Medical, Dental, Vision and Life Insurance coverage.
• 401(k) + match.
• Opportunities for career and professional development with conferences, events, seminars and continued education.
• On-site fitness center at the Home Office in Columbia, Missouri, complete with weightlifting machines, cardio equipment, group fitness space, racquetball courts, a climbing wall, and much more!
• Volunteering and local charity support that help you nurture and grow the communities you call home through our Giving Back initiative.
• Stocked breakroom and full kitchen with breakfast and lunch provided daily by our chef and kitchen crew.

We embrace diversity in all of its forms and foster an inclusive environment for all people to do their best work with us. 

We're an equal opportunity employer. All applicants will be considered for employment without attention to ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity status or disability status.

All appointments will be made on merit.