Lead Security Engineer at Surprise
You seem a little late
Most likely, this vacancy is closed because it has already made someone's Mondays happy.
But don't worry - we have something to offer you!
See other open features on the site
Surprise.com is on a mission to turn the magical, uplifting experience of Surprise into a daily, weekly, and monthly life event – because it makes people happy. Our Surprise Box, and delightful companion app, is the most exciting way to get amazing goodies from brands you love and brands you’re about to love. With daily games, the ability to send and get Surprises from friends, and Grand Surprises – every day is filled with wow!
We are looking for an experienced and capable Security Lead to join our team in Lviv (Magnus). This role offers tremendous opportunities to build a highly scalable, highly stable, easily maintainable back-end architecture; to push the boundaries of fault-tolerant programming and work with a broad range of public and proprietary APIs.
So, if you’re ready to make an enormous impact in a fast-paced, high-growth environment and see your fingerprints on a truly global product, we want to hear from you!
What will you be doing?
- Develop and implement an Information security strategy;
- Contribute to all levels of the architecture from a security perspective;
- Act as the AWS cloud security subject matter expert;
- Provide guidance on secure software development at all stages of the SDLC;
- Design and implement SAST and DAST tools CI/CD pipelines;
- Work closely with Engineering teams, DevOps and IT teams to implement security controls;
- CoordinateImplement SIEM implementation;
- Help to analyze, troubleshoot, and investigate security-related anomalies and incidents;
- Develop and drive internal security awareness program;
- Lead Information security team.
What we are looking for?
- 6+ years of experience in security engineering;
- 2+ years of experience in the position of Lead Information security engineer;
- Experience with one of the following compliances: SOC 2, ISO27k series, or PCI DSS;
- Familiar with GDPR or CCPA regulations;
- Advanced experience with AWS cloud services;
- Experience in IT security;
- Advanced hands-on experience with security tools: SAST, DAST, SIEM, IDS/IPS, EDR, SOAR;
- Coding/scripting experience;
- Experience with Linux and Networking;
- Knowledge of the most common implementations of the threats, prevention, and protection tactics;
- Experience implementing effective incident response process;
- People management experience;
- Upper-Intermediate English or higher (B2+).
Benefits
- Work on interesting and challenging projects, while building a pioneering software category;
- Great atmosphere, with the vibe and energy of a high-growth tech company;
- Competitive salaries;
- Close collaboration between UA and US team members;
- Ultramodern office in the heart of Lviv (Magnus);
- English classes and an immersive English-speaking work environment (we have a lot of native speakers at the office);
- Corporate activities and parties;
- Dedicated wellness area in the office;
- 20 working days of paid vacation and Public Holidays of Ukraine;
- 15 days of paid sick leave;
- Medical Insurance;
- Corporate Taxi (from/to office; up to amount);
- Parking option;
- And, of course, we use Surprise internally!
