XSELL Technologies is transforming the way businesses interact with their customers to build more meaningful relationships. We leverage augmented intelligence to deliver digital personalization at scale. Our unique business model brings together proprietary cloud-based natural language processing with deep human expertise to empower the best real-time responses to exponentially increase sales and conversion rates alongside an unmatched customer service experience. 

Why XSELL?

At XSELL, you will be poised to write the best chapter of your career. The time is now!

We have spent the last four years envisioning and creating a platform that today is transformative, but tomorrow will be mainstream. The next chapter of our company's growth is right around the corner. We are looking for wildly talented, capable people who can grow with us at a fast pace, take on more, lead through ambiguity and want to be a part of something important and meaningful. At XSELL we foster an entrepreneurial, results driven work environment where you will have the opportunity to be part of a collaborative, inclusive team.

Overview of the Role

We are currently seeking a Security Lead to ensure our system meets client security requirements and compliance standards: particularly those relevant to Healthcare, Insurance, Finance, and E-Commerce verticals. This person will align standards, processes, technology, frameworks and security with overall business and technology strategy to create solutions that balance business requirements with information and cyber security requirements

Ways You’ll Contribute

• Informing business and technology strategy relative to industry security requirements
• Reviewing current system security measures and recommending and implementing enhancements
• Conducting regular system tests and ensuring continuous monitoring of network security
• Developing project timelines for ongoing system upgrades
• Ensuring all personnel have access to the IT system limited by need and role
• Establishing disaster recovery and business continuity procedures as well as conducting breach of security game-days
• Promptly responding to all security incidents and providing thorough post-event analyses
• Design, build and implement enterprise-class security systems for a production environment
• Identify and communicate current and emerging security threats
• Design security architecture elements to mitigate threats as they emerge
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
• Use current programming language and technologies to writes code, complete programming and performs testing and debugging of applications
• Ability to document and act on all security threats including but not limited to privacy breaches or malware threats
• Train users in implementation or conversion of systems

What You’ll Bring 

In order to be successful, you will need the following:

Experience with and knowledge of:

• API/web services security, cloud-native and containerized architectures, scripting languages and modern data intensive distributed systems.
• Relevant National Institute of Standards and Technology (NIST) standards, ISO27001, OWASP and associated risk managed methodologies 
• Knowledge of patch management, firewalls and intrusion detection systems
• Compliance SOC 2, HIPAA, HITRUST, PCI, GDPR, CPAA
• Windows, Linux
• Familiar with public key infrastructure (PKI), cryptographic protocols (SSL/TLS), and key management best practices

Five or more years’ experience in:

• Security architecture, demonstrating solutions delivery, principles, and emerging technologies - Designing and implementing security solutions. This includes continuous monitoring and making improvements to those solutions, working with an information security team.
• Consulting and engineering in the development and design of security best practices and implementation of solid security principles across the organization, to meet business goals along with customer and regulatory requirements.
• Familiarity with proactive monitoring of network activity and hardware to identify any potential security threats
• Security considerations of cloud computing: They include data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, APTs, data loss and DoS attacks.
• Identity and access management (IAM) – the framework of security policies and technologies that limit and track the access of those in an organization to sensitive technology resources.

General skills include:

• Exceptional communication skills with diverse audiences - Strong critical thinking, problem solving and analytical skills
• Strong leadership, project and team-building skills, including the ability to lead teams and drive projects and initiatives in multiple departments
• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects
• The ability to be the enterprise security subject matter expert who can explain technical topics to those without a technical background

XSELL Technologies is an Equal Employment Opportunity Employer and all employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.