Security Engineer

Bolt is on a mission to democratize commerce. We relentlessly prioritize our retailers—putting their brands front and center while enabling frictionless shopping at any touchpoint in the customer journey. At the center of it all is our rapidly growing universal shopper network—Bolt merchants such as Deckers, Saks OFF 5TH, Revolve, and Casper can access tens of millions of shoppers, offering them a best-in-class checkout.

And revolutionizing ecommerce is only half of the equation—we’re also transforming the way we work. At Bolt, we have created a work environment where people learn to drive impact, take risks and make big bets, and grow from feedback, all while feeling welcomed and accepted for who they are. Come join us on the adventure today!

The Security Engineer will ensure that Bolt’s infrastructure is securely designed and implemented with high standards to maintain customer trust. If you enjoy analyzing networks, systems and services from a security perspective, and you are skilled at solving security challenges, this position will provide you with a challenging and rewarding opportunity. You will participate in the design, build, deployment and operation of security-focused infrastructure and provide consultation, architectural review, risk assessment of Bolt’s systems and networks that support our products spanning North America and Europe.

You will:

• Be responsible for crafting and building security infrastructure to support Bolt’s products
• Use your solid understanding of authentication protocols, core network and system security principles along with your up-to-date understanding of modern attack patterns and methods to drive security into tools used by Bolter’s everyday
• Draw heavily on your experience collecting, analyzing, and summarizing data from a variety of sources to create compelling written and verbal communications. Evangelize security within Bolt and be an advocate for customer trust and customer promise
• Advise and consult with internal stakeholders on risk assessment, threat modeling, and vulnerability remediation­­
• Support Incident Response Team with tooling and data
• Perform design reviews and risk assessments on application features
• Evaluate or create new technologies and services in order to solve complex security issues

Requirements:

• Bachelor’s Degree in Computer Science, or equivalent work experience
• 4+ years of experience in system and/or network security engineering
• Scripting and or coding skills in multiple common languages (e.g. Perl, Python, Ruby, shell scripting)
• Proven ability in designing and delivering enterprise-level security solutions, both commercial and internally-developed
• Knowledge of network and web related protocols (e.g. TCP/IP, UDP, IPSEC, HTTP/S)
• Ability to identify security risks and issues to architecture and develop effective mitigation plans for infrastructure
• Experience managing GNU/Linux based systems
• Excellent written and verbal communication skills
• Experience designing solutions in AWS or other cloud solutions.
• Experience deploying changes as Infrastructure as Code (IAC) via Terraform or equivalent.

Estimated cash compensation for this role: $140k-160k DOE plus equity

Benefits:

• Comprehensive health coverage: Medical, dental and vision
• Remote-first workplace
• Time away: Flexible PTO, paid holidays + floating holidays, your birthday off!
• Paid parental leave
• Competitive Pay
• Retirement plans
• Virtual and in-person team & company events

In addition to our core values, Bolt is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity and expression, genetic information, pregnancy and related conditions, veteran status or any other reason prohibited by law. On our mission to democratize commerce, the Bolt platform levels the playing field for everyone. As a company, we are committed to designing products, building a culture, and supporting a team that reflects the diverse population we serve (that is, everyone).