Security Engineer Job at Factory, San Francisco, CA

ck0wclBIaGpnYnF5TTJkM2RVMU1hTXJT
  • Factory
  • San Francisco, CA

Job Description

Factory is seeking a talented Security Engineer to join our team. In this role, you will play a critical role in developing and maintaining the security foundation of our platform. You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy. Your expertise in TypeScript, Python, Kubernetes, CI/CD, and terraform orchestration will be crucial in identifying and mitigating potential security vulnerabilities.

What you will do and achieve:

  • Design, implement, and manage security measures for the protection of our cloud infrastructure, applications, and data, focusing on both preventative controls and rapid response capabilities.

  • Collaborate closely with our engineering teams to integrate security practices into the software development lifecycle, including secure coding standards, automated security testing, and secure architecture design.

  • Stay up-to-date on the latest security threats, vulnerabilities, and mitigation strategies.

  • Conduct security code reviews to identify and remediate security vulnerabilities.

  • Develop and implement automated security testing procedures to identify vulnerabilities and risks, recommending and implementing appropriate mitigation strategies.

  • Respond to security incidents and participate in incident response procedures.

  • Document security processes, procedures, and best practices.

  • Lead security awareness and training programs, empowering all team members to recognize and prevent potential security threats.

Qualifications

  • Minimum 5+ years of experience as a Security Engineer with a focus on product security, with a strong background in securing cloud-based environments (AWS, Azure, GCP) and understanding of Infrastructure as Code (IaC) security practices.

  • Strong coding skills with proficiency in TypeScript and Python.

  • Expertise in various security domains such as application security, network security, security operations, and incident response.

  • Experience with container security (Docker Security, Kubernetes Security).

  • Familiarity with a wide range of AWS services, including but not limited to VPC, EC2, Lambda, Amazon RDS, and S3.

  • In-depth knowledge of CI/CD pipeline tools and practices, ideally with experience in GitHub Actions or Jenkins.

  • Knowledgeable in security compliance frameworks and regulations (e.g., ISO 27001, SOC 2, GDPR) and experience with security assessments and third-party audits.

  • Proficiency with security tools and technologies, such as firewalls, IDS/IPS, vulnerability scanners, WAF, SIEM, and encryption solutions.

  • Demonstrated ability to influence security strategies and drive improvements within a team.

  • The team goes into the office 5 days a week in San Francisco (walking distance to Caltrain).

#J-18808-Ljbffr

Job Tags

Work at office

Similar Jobs

McGuire & Hester

Construction Laborer- Landscape- Union Job at McGuire & Hester

 ...and drip irrigation systems Place and prepare soil with amendments and fertilizers Raking and fine grading of prepared planting soil Tree and shrub planting including tree staking and/or guying Sod lawn preparation and installation Able to safely work near... 

UnCommon Logic

Digital Marketing Strategist Job at UnCommon Logic

 ...Digital Marketing Strategist (un)Common Logic | Austin, Texas | Hybrid/Remote (un)Common Logic is an Austin-based digital marketing performance agency where strategists own real client relationships, shape actual strategy, and work alongside a team that genuinely... 

Every Child Pediatrics

Nurse Practitioner/Physician Assistant - School-Based Health Centers Job at Every Child Pediatrics

Description: Every Child Pediatrics is currently looking for an experienced, board-certified Advanced Practice Professional (Nurse Practitioner or Physician Assistant) to work at our School-Based Health Centers (SBHCs) part-time or full-time (16-32 hours per week). Our...

Nao Now

Global English Teacher (Online - Independent Contractor) Job at Nao Now

 ...About the Role Nao Now is seeking enthusiastic and engaging Online English Teachers to deliver 1-on-1 virtual lessons to students ages 5...  ...a positive learning environment. Key Responsibilities Teach 25-minute, 1-on-1 English lessons to children ages 512 Deliver... 

PROENERGY

Corporate Pilot- G280 Job at PROENERGY

 ...Corporate Pilot- Phenom G280 About PROENERGY PROENERGY is an engineering R&D and manufacturing powerhouse. The company addresses...  ...reports and training records. Required Qualifications FAA Airline Transport Pilot (ATP) Certificate with Multi-Engine Land rating....