Senior Cybersecurity Engineer

Onebrief is building the future of military decisions. Our product is built for operational planning across the US and our allies and is currently in broad use at 8 of the largest military headquarters in the world. 3 of the 4 biggest operational plans in the US are currently built with Onebrief.

We’ve raised $53M in Venture Capital from top tier venture investors, including Human Capital, Caffeinated Capital, and Y Combinator. We are currently a Series B company and aspire to IPO in a few years.

We’re a rapidly growing team of 100. We’re spread worldwide, across Korea, Hawaii, the continental US, the UK, Germany, and Italy. This year, we plan to build a presence in Australia, Japan, and the Middle East.

Users love our product. They make statements like, “I will never plan again without Onebrief.” We grew usage 4x in 3 months. Last year, we achieved 100% gross retention and 158% net retention. Last year, our revenue grew 4x and reached double-digit millions. We anticipate similarly rapid growth this year.

Onebrief will become the single collaborative planning solution – from the Battalion level up to the Joint Staff, for the US and our allies around the world.

As a Cybersecurity Engineer, you will play a crucial role in ensuring the security and integrity of our corporate and customer deployed environments. Your primary responsibilities will include:

• Designing and Implementing Security Solutions: Develop and deploy robust security measures to protect cloud-native and on-premises applications and infrastructure.

• Incident Response and Management: Lead efforts to detect, respond, and mitigate security incidents, ensuring minimal impact on operations.

• Continuous Improvement: Regularly evaluate and enhance security protocols, staying ahead of emerging threats and vulnerabilities.

• Collaboration: Work closely with development, operations, and compliance teams to integrate security best practices into every stage of the application lifecycle.

• Security Audits and Assessments: Conduct thorough security audits and assessments, providing actionable insights and recommendations to improve overall security posture.

This is an opportunity for candidates who are passionate about cybersecurity and committed to staying updated with the latest trends and technologies. You thrive in collaborative environments, enjoy tackling complex security challenges, and are always looking for innovative ways to enhance security measures. Detail-oriented and motivated by growth, you seek a role that offers professional development and career advancement in a dynamic and growing company.

The ideal candidate for this role is a seasoned cybersecurity professional with a passion for cloud-native technologies and a proven track record in securing complex environments.

By joining our team, you will have the opportunity to make a significant impact on the security of our cloud-native applications, ensuring that our customers can operate safely and efficiently in the cloud.

Background and Experience:

You have a strong foundation in cybersecurity, with at least 5-7 years of experience in the field. Your background includes hands-on experience with integrating cloud platforms such as AWS, Azure, or Google Cloud Platform with continuous monitoring solutions. You have a deep understanding of cloud security principles, including identity and access management, encryption, and network security.

Technical Skills:

You are proficient in deploying and managing cloud security applications, firewalls, and SIEM systems. Your expertise extends to scripting and automation, with experience in languages such as Python, Java, or Go. You are comfortable working with CI/CD pipelines and have a solid grasp of DevSecOps practices.

Soft Skills:

You possess strong analytical and problem-solving skills, with a keen eye for detail. Your communication skills are top-notch, enabling you to effectively collaborate with cross-functional teams and convey complex security concepts to non-technical stakeholders. You are self-motivated, proactive, and thrive in a fast-paced, dynamic environment. You are able to translate business needs into functional software, quickly developing and deploying internal tooling to help meet security objectives.

Qualifications

• (Desired, not required): Bachelor’s degree in Computer Science, Information Systems, or a related field.

• 5+ years of experience in cybersecurity, with a focus on cloud environments and data centers.

• Certifications: Relevant certifications such as CISSP, CCSP, AWS Certified Security, GIAC Cloud Security Automation (GCSA), Offensive Security Certified Professional (OSCP), GIAC Cloud Security Essentials (GCLD), or equivalent.

• Technical Proficiency:

  • Experience with cloud platforms (AWS, Azure, GCP)

  • Proficiency in scripting and automation (Python, JavaScript, Go)

  • Experience with security tools (cloud security applications, firewalls, SIEM, Ansible, Terraform)

  • Familiarity with operating systems and CLI (Linux, Windows, MacOS) (Terminal/PowerShell)

  • Understanding of CI/CD pipelines and DevSecOps practices

• Soft Skills:

  • Strong analytical and problem-solving abilities

  • Excellent communication and collaboration skills

  • Detail-oriented and proactive in identifying and mitigating security risks

• Most importantly, you are a true Onebriefer:

  • You are obsessed with creating value for real users

  • You are ambitious, scrappy, and a creative problem-solver

  • You learn quickly, work iteratively, and naturally seek collaboration

  • You approach your work with integrity, intellectual honesty, and a low ego

  • You communicate frankly, clearly, and succinctly

  • You thrive as a self-starter, embracing autonomy and ambiguity

  • You are a U.S. citizen