Foursquare Labs, Inc. is looking to solve security challenges by building security tooling and automation, developing alerting and threat detection capabilities, responding to security events, and mitigating risks to the business. They also aim to contribute to revenue by assisting in customer acquisition through security expertise and education.
Requirements
- 2 years of professional experience implementing and ensuring compliance with industry best practices vulnerability management program and other enterprise-grade security controls, including regular triage of vulnerability reports, penetration testing findings, and vulnerability scanning results
- 2 years of professional experience with Infrastructure as Code (Terraform)
- 2 years of professional experience with secure coding practices, ethical hacking, and threat modeling
- 2 years of professional experience writing code in Python or JavaScript
- 2 years of professional experience performing administration of AWS cloud services and performing AWS cloud infrastructure setup and configuration, automated testing and deployment
- 2 years of professional experience proposing, designing, planning, and implementing strategic and tactical security improvements (including device management, identity and access management)
- 2 years of professional experience performing penetration testing and mitigation of real world attacks including DoS, XSS, CSRF, IDOR, dictionary attacks, and SQL injection
Responsibilities
- Build security tooling and automation using Infrastructure as Code and serverless frameworks.
- Develop alerting and threat detection capabilities in both corporate and production environments.
- Respond to security events, including isolating, mitigating, and investigating active threats.
- Provide technical expertise in all areas of cybersecurity, including AWS cloud security, architectural design, corporate security and asset management, email security, encryption and other cryptographic measures, authentication and authorization, anti-malware, intrusion detection and prevention, and human factors security.
- Work with infrastructure and feature engineering teams to identify and mitigate risks to the business.
- Conduct company-wide security advisories and implement measures following national and international security standards and best practices.
- Implement strategic security improvements as organizational and policy initiatives.
Other
- Directly contribute to Foursquare revenue by helping to close customers through direct conversations or via preparing sales staff with relevant security education and information.
- Use strong communication skills (written and verbal) to maintain and cultivate strong relationships with Privacy and Legal departments to maintain compliance with contractual and regulatory requirements.
- Provide your expert opinion to leaders and executives in order to inform strategic decision making whenever security considerations are relevant.
- Advocate for the security culture of the organization, including collaborating with stakeholders across Infrastructure and Engineering teams.
- Mentor and cultivate the growth of engineers on the team and the wider organization and support their career paths at the company.
