Senior Cyber Security Engineer

About the role

Good Systems is the parent company behind Goodnotes, where millions of people capture and develop their ideas. Goodnotes is where we started, and it’s now the foundation for a growing family of products. By reimagining how we interact with information, we’re bringing together human creativity and the breakthrough capabilities of AI. We build products that help people turn good thinking into good work.

Our Values

Dream big

-

Be visionary, strategic, and open to innovation

Build great things

-

Work in service of our users, always improving and pushing higher

Operate like an owner

-

Take responsibility with bold decision-making and bias for action

Win like a sports team

-

Be trusting and collaborative while empowering others

Learn and grow fast

-

Never stop learning and iterate fast

Share our passion

-

Share ideas and practice enthusiasm and joy

Be user obsessed

-

Empathetic, inquisitive, practical

About the role

You will join a distributed team across Europe and Asia with shared time for collaboration such as planning, retros, stand-ups and brainstorming sessions. You will work alongside other iOS engineers, backend engineers, QAs and designers to improve our real-time collaboration features, which are used by millions of users around the globe. As a Senior Security Engineer in Goodnotes, you will own the security of our cloud-based platforms and services on AWS, as well as contributing to the overall security strategy of the organization.

This is the role for you, if you’re excited to work on the things listed below:

- Design, implement, and maintain security architectures and strategies for AWS cloud environments.

- Monitor and analyze security alerts, logs, and reports to detect and respond to potential threats.

- Lead incident response activities and perform root cause analysis to prevent future incidents.

- Collaborate with cross-functional teams to integrate security into application development and deployment processes.

- Work with the legal team to develop and enforce policies for secure cloud operations.

- Provide expert guidance on AWS security services and features to internal teams.

- Stay up-to-date with emerging security threats, technologies, and trends.

- Setup and run bounty programs.

The skills you will need to be successful in the above:

- 5 years+ experience in a security engineering role with a focus on AWS environment.

- Strong knowledge and experience with security standards and frameworks (e.g., SOC2, ISO 27001, etc)

- Strong knowledge and able to write IaC for AWS security services and features, such as IAM, Security Groups, VPC, KMS, CloudTrail, and GuardDuty, AWS Control Tower