Lead Technical Security Engineer

About the role

ABOUT YOU:

The security team is vital in protecting the organization’s information assets and ensuring product safety, trust, compliance, and privacy.

As a Security Technical Team Lead, you’ll shape the team’s security vision, drive innovation, and work on complex technologies to design safeguards, develop secure practices, and mentor the team. This role blends technical expertise, leadership, and innovation to strengthen the organization’s security initiatives.

IN THIS ROLE YOU WILL - Lead, participate in, and contribute to partnerships between security, engineering, product, and operations teams to build, orchestrate, and automate security controls and services in SaaS solutions, with an emphasis on building rather than advising.

- Support the product and application security team by defining and refining processes such as threat modeling, embedment models, and prioritization of features, defects, and vulnerabilities.

- Assist the red team with ongoing activities, including managing bug bounty programs and continuous penetration testing platforms.

- Lead the design and development of key security features for the GoodLeap platform, such as authentication (authn), authorization (authz), device profiling, and data safeguards.

- Mentor and provide technical guidance to other members of the security team.

- Support or build components of the security analytics platform.

- Contribute to investigations, threat hunting, and incident response activities in a supporting role; assist the monitoring and response team with creating playbooks for specific incident response scenarios.

- Collaborate with the security operations team to select, implement, and operate security solutions.

- Support the security operations team with the vulnerability management lifecycle.

- Ensure technical alignment across security solutions and initiatives within the team, from governance, risk, and compliance (GRC) to product security.

- Represent the security team in enterprise architecture forums as needed.

YOU ARE A GREAT FIT IF YOU BRING THE FOLLOWING: - Strong communicator with the ability to lead technical architecture discussions and drive technical decisions, while effectively communicating with non-technical audiences.

- Deep familiarity with AWS services, including KMS, SST, Container Registry, ELBs, Lambda, API Gateway, CloudTrail, IAM, and others (knowledge of GCP and/or Azure is a plus).

- Proven ability to establish credibility and build trust with engineers and operational staff; confident yet humble.

- Hands-on experience with microservices and associated orchestration tools, such as ECS, EKS, Nomad, and Istio, with an understanding of the operational and security implications of these technologies.

- Excellent understanding of both human and non-human identity management, as well as common enterprise and consumer authentication standards and use cases.