Security Engineer

We're hiring a Security Engineer to help us maintain our commitment to privacy, security, and compliance. You'll be working alongside Canny's founders and sales and engineering teams 🚀

Company:

– Profitable early-stage startup, 11 person team, $3m+ annual revenue
– Over 1,000 customers, including industry-leading companies like ClickUp, CircleCI, Framer, and Compass
– Fully bootstrapped, we've never raised any outside capital, we are our own bosses
– 100% remote

Responsibilities:

– Work with auditors to receive various security-related certifications/reports (eg. SOC 2 Type II, ISO 27001, PCI-DSS)
– Analyze networks and systems to identify opportunities for improvement
– Complete customer security questionnaires to unblock sales opportunities
– Process incoming vulnerability reports sent to security@canny.io
– Implement and enforce best practices and security standards for the organization
– Routinely test and audit company software and networks
– Provide consultation to our product team regarding the security implications of new features

Technologies:

– Cloud Services: AWS
– Source Control: GitHub
– CI/CD: CircleCI
– Database: MongoDB, hosted on MongoDB Atlas
– Monitoring: Sentry, DebugBear, Pingdom, PagerDuty, CloudWatch
– Software: JavaScript, Node.js, React, MongoDB

– You have a thorough understanding of best practices and security standards and how to implement them at a business-wide level

– You have a familiarity with security compliance programs and frameworks (eg. NIST, SOC 2, ISO 27001)

– You have experience managing IDS/IPS/FIM/Vuln scanning

– You have hands-on experience with a variety of programming languages (preferably including JavaScript)

– You have excellent written and verbal communication skills

– 3+ years of experience in the cybersecurity industry