Senior Product Security Engineer

About Monte Carlo

As businesses increasingly rely on data to power digital products and drive better decision-making, it’s mission-critical that this data is accurate and reliable. Monte Carlo, the data reliability company, is the creator of the industry's first end-to-end Data Observability platform. Named an Inc. Best Workplace for 2024, a DBTA Readers Choice for Best Data Observability Solution for 2024, a G2 Best Product for 2023, and the "New Relic for data" by Forbes, we've raised $236M from Accel, ICONIQ Growth, GGV Capital, Redpoint Ventures, IVP, and Salesforce Ventures. Monte Carlo works with data-driven companies like Fox, Pepsico, Amazon, American Airlines, and other leading enterprises to help them achieve trust in data.

About the Role:

Monte Carlo is seeking an exceptional Product Security Engineer to lead our security engineering efforts in a cloud-first environment. Your role will be central to maintaining and enhancing our vulnerability management program, developing security automation, and managing security alerting/reporting. You will also actively participate in new features and code reviews to support our Engineering team. This position demands a comprehensive understanding of AWS security, proficiency in secure Python development, and expertise in security automation.

Here’s what you’ll be doing:

• Spearheading security engineering in a cloud-first environment.

• Enhancing and maintaining our vulnerability management program.

• Developing and maintaining security automation.

• Managing security alerting and reporting systems.

• Contributing to Engineering efforts via code reviews and security assessments. 

We’re excited about you because you have:

• In-depth knowledge of AWS security.

• A documented background in secure Python development and security automation.

• Experience with SIEM tools such as Splunk, Panther, or Datadog.

• A sense of urgency, an ownership mindset, self-starter qualities, and a strong customer focus.

• Excellent written and verbal communication skills.

• An ability to work autonomously, think strategically, and make decisions with conviction.

Other things that excite us:

• Security experience in GCP/Azure.

• Experience in operating/maintaining a Vulnerability Management program.

• Familiarity with SCA tooling (Github Advanced Security, Orca, Wiz, etc).

• Basic understanding of SOC 2, ISO 27001, and/or NIST 800-53.

• Red/Blue/Purple team experience for aiding in 3rd party pentest scoping.

What this role is NOT:

• Developing customer-facing features (frontend or backend) within the product.

• Running internal red/purple team activities.

#LI-REMOTE

#BI-REMOTE

Come As You Are

Equality is a core tenet of Monte Carlo's culture. We are committed to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. 

Monte Carlo is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

We are proud to be recognized for our world-class employee experience:

Monte Carlo Named an Inc. Best Workplace for 2024

Monte Carlo Named A Top 20 ORG For Venture Capital Funded Companies, Spring 2024

Monte Carlo Named A Top 5 ORG in San Francisco, Spring 2024

Data Quality Startup Monte Carlo Is A Unicorn After Fourth Funding Round In Two Years