Secure Cloud Engineer
The secure cloud engineering roles play a key role in ensuring the security of our cloud infrastructure and protection of our sensitive PII data per our information security policy. This person will help identify security gaps and drive remediation activities to close those gaps. This position plays an integral role in defining and assessing the organization's security strategy, architecture and practices as well as contributes to maturing the company's infrastructure security architecture and technology frameworks.
What your day could consist of:
- Be part of the security team to drive security related initiatives including but not limited to creating/maintenance of security policies, implementation of security procedures/controls, and monitoring in conformance to the policy
- Deploy and manage applications to monitor cloud infrastructure security and intrusions
- Perform initial incident triage, determine scope, urgency, and potential impact of security incidents
- Provide guidance and work with the infrastructure team on security best practices around OS hardening, access logging, and patching
- Design, deploy, manage and improve critical security infrastructure services/tools for authentication and authorization, PKI, secrets management, logging, detection, vulnerability management and more
- Work with external auditors on compliance
- Provide security guidance to SRE / DevOps Engineering teams in the company
- Perform security gap assessments and implement remediations
- Run periodic infrastructure vulnerability scans and facilitate pen tests while working with engineering teams on identified vulnerabilities for resolution
- Work with the production operations team on securing and best practices for all our AWS accounts
- Own the overall cloud infrastructure security program
- Monitors industry security updates, changes, technologies, emerging threats and best practices for continuous improvement
What is needed:
- 5+ years of experience in a cloud infrastructure environment with a focus on information security and networking (eg: AWS, Azure, GCP)
- Knowledge of AWS security best practices and security controls using industry standard tools (eg: Cloudtrail, GuardDuty, IAM, SSO, VPC, Control Tower)
- Experience with Infrastructure as Code (eg: Terraform)
- Physical security infrastructure environments is a plus
- Working knowledge of firewall technologies (eg: Palo Alto, WAF)
- Experience with OS hardening techniques for Linux environments
- Excellent communication and collaboration skills
- The ability to build partnerships across the enterprise
- Nice to have:
- Experience with access logging, centralized logging, and monitoring/alerting of security log events with industry standard tools (eg: ELK, InsightIDR, DataDog)
- Experience with applications for monitoring infrastructure security and detecting intrusions with industry standard tools (eg: Threat Stack, Crowdstrike, Rapid7)
- Working knowledge of incident response, threat modeling, and mitigation
- Working knowledge of common information security management frameworks such as SOC2 Type 2 and ISO27001
- Self-motivated and strong sense of ownership of tasks
- Bachelors or Masters' degree in Computer Science or Information Security
About ActiveCampaign:
We are a category-defining Customer Experience Automation Platform (CXA) that helps over 160,000 businesses in 170 countries meaningfully engage with their customers. The platform gives businesses of all sizes access to 600+ pre-built automations that combine email marketing, marketing automation, CRM, and machine learning for powerful segmentation and personalization across social, email, messaging, chat, and text.
As a global multicultural company, we are proud of our inclusive culture which embraces diverse voices, backgrounds, and perspectives. We don’t just celebrate our differences, we believe our diversity is what empowers our innovation and success. You can find out more about our DEI initiatives here.
As one of the fastest-growing SaaS companies in the world, we are scaling rapidly to keep up with market demand. We are growing all of our teams and looking for people who share our values, deliver innovation frequently, and join us in our mission to grow our customer base from 160,000 today to millions. We have been ranked #4 Best Place to Work on Built In Chicago in 2021, a best workplace for remote employees by Quartz and received recognition as a great place to work across all of our regions, and continue to be globally recognized for our employee-centric culture here.
Perks and benefits:
ActiveCampaign is an employee-first culture. We take care of our employees at work and outside of work. You can see more of the details here, but some of our most popular benefits include:
-Comprehensive health and wellness benefits (including no premiums for employees on our HSA plan, telehealth and tele-mental health, and access to the Calm app for mediation)
-Open paid time off
-Generous 401(k) matching with no vesting
-Generous stipend to outfit your remote office
-Career growth including access to personal and professional coaching through Udemy
-Access to life coaches via Modern Health
-Cool swag
ActiveCampaign is an equal opportunity employer. We recruit, hire, pay, grow and promote no matter of gender, race, color, sexual orientation, religion, age, protected veteran status, physical and mental abilities, or any other identities protected by law.
Our Employee Resource Groups (ERGs) strive to foster a diverse inclusive environment by supporting each other, building a strong sense of belonging, and creating opportunities for mentorship and professional growth for their members.
See More
