Position: Sr. Information Security Engineer

Location: Chicago Loop

About Raise

We are on a mission to help people make their money worth more. Our marketplace gives consumers the chance to unlock the value in their gift cards. Members can sell their unwanted gift cards for cash and buy cards to save at their favorite stores.

We value attributes like passion, excellence, integrity, communication, and respect in our employees.

About The Position

The Sr. Information Security Engineer is responsible for protecting the confidentiality, availability, and integrity of Raise information assets. In particular, this role will focus on driving the design, implementation, and maintenance of security technology and program functions for the products and services related to our marketplace.

Responsibilities

• Consult with internal engineering teams, enabling them to build and design products securely


• Perform security reviews of new and existing products and services


• Triage reports from external researchers; drive confirmed issues to resolution with engineering teams


• Participate in incident handling


• Train engineering teams on application security related topics


• Build frameworks to provide secure defaults and tools to the engineering team that will automatically scan and detect security problems


• Review code for security defects and recommend or implement fixes



 
•  

Skills & Qualifications

• Minimum 5+ years experience in information security, technology and risk management, including experience with Internet technology and security issues


• Passionate about technology and information security


• Extensive knowledge of current and upcoming IT security technologies and techniques that cover all levels of IT architecture


• Thorough understanding of application security concepts, such as the OWASP Top Ten, and be able to articulate them to technical and non-technical staff


• Development experience in Ruby, Python, or Java


• Deep understanding of web application architecture, how to detect vulnerabilities and fix how to fix them


• Knowledge of disaster recovery and business continuity principles and practices


• Extensive experience in TCP/IP networking, firewalls and virtual private networks (VPN)


• Vast understanding of current encryption standards and their implementation


• Experience with a broad range of relevant systems platforms, including Windows, Unix, Exchange, Oracle and MySQL


• Ability to weigh business risks and enforce appropriate IT security measures while maintaining the speed of delivery that is inherent in a fast-paced technology company


• B.A. or B.S. in Computer Science, Information Management, or relevant field


• CISSP is a plus



 
•  

Benefits

All employees receive a comprehensive benefits package including health, dental, vision, a 401K, disability, life insurance and a minimum 15 days PTO. As an engineer, you will receive up to eight weeks of maternity leave and two weeks of paternity leave, or a $5,000 adoption credit and up to six weeks leave for adoption family bonding.

Apply Today

Equal Opportunity Employer M/F/D/V

E-Verify Employer