In this role, you will…
- Develop and run tools to gather security signals from production services.
- Automate workflows and improve identification and response time for security events.
- Build and optimize security detection rules for production infrastructure and services.
- Respond to security events, triage, perform investigations, incident analysis, and communicate clearly and efficiently to stakeholders.
- Partner with the engineering team on internal and customer-facing security and privacy initiatives while ensuring secure data accessibility, quality, and reliability are considered.
- Work closely with the engineering and IT team to document the security architecture, review non-security process workflows, and threat model against both.
- Interact with all Bilt employees and contractors for incident response followups, containment, security awareness education, tabletops and trainings.
- Contribute to refining Bilt Rewards’ policies, guidelines, and procedures about protecting information assets, and presenting those policies Bilt-wide when appropriate.
- Work closely with various departments of the organization to lead and participate in security operations, vulnerability management, risk assessments, and project maintenance.
- Remain updated on common, bleeding-edge security incidents affecting the industry and ensure Bilt remains properly protected from them.
- Understanding application security (AppSec) standards and practices is preferred but not mandatory, such as the OWASP Mobile Application Security Verification Standard (MASVS) and Mobile Security Testing Guide (MSTG).
In terms of qualifications, we’re seeking:
- 2+ years with GCP or 4+ years with AWS/Azure experience
- Hands-on experience with data analysis, modeling, and correlation at scale.
- Experience developing tools and automation using common DevOps/DevSecOps toolsets and programming languages.
- Ability to analyze endpoint, network, and application logs for anomalous events.
- Operating systems internals and forensics experience for macOS, Windows & Linux.
- A sense of helpfulness towards the less technical, dedication towards the Bilt mission and a critical-thinking mindset often needed in InfoSec.
- BurpSuite, BigQuery, Java, GitHub admin experiences a big plus
With also…
- AppSec Engineers with Incident Response experience, or
- T2 Incident Responders with forensic/containment experience in Google Cloud Platform (GCP), Data Loss Protection (DLP), or
- Purple-teamers with experience applying their own remediations successfully in client environments, or
- Detection/Rules engineers with track record of successful workflow automations, or
- Security Researchers/Threat Hunters who specialize in Cloud (GCP), Web/Mobile apps, and/or DLP, or
- Someone with a blend of action-oriented, automation-focused incident response and AppSec experience (2+ years), or
- Your background!
Benefits:
- Compensation - We offer a competitive salary with a meaningful stake in the company via equity and our performance bonus program
- Health insurance for you (& your loved ones) from day one - Enjoy a One Medical Membership, wellness stipends, family programs and more, on us. We’ve got you and your family covered from day one.
- 401k plan with a match - Retirement may feel more like a pipe dream than a reality but we’re here to help you get there.
- Commuter FSAs - We believe the best ideas come from being together in one place. We just don’t think getting there should be so expensive.
- UNLIMITED PTO - Because we believe that working hard shouldn’t mean always working. Take time for you as often as you need it.
- Exclusive Employee only Bilt Points - We give our employees unique opportunities to earn points throughout their time at Bilt.
- Team Events - We believe in human connection so we hold events to help our employees break from the monotony of the typical work week.
At Bilt Rewards, we believe in transparency and we do our best to make sure the company and our candidates are on the same page as it relates to compensation. In addition to posting salary ranges for our open roles, candidates should expect to be asked about compensation expectations and requirements early on in their interview process. Our goal is to highlight when expectations and Bilt’s salary range may be out of sync, and work with the candidate to determine whether it makes sense to continue conversations.
We are considering candidates with differing levels of expertise for this position. Leveling will be based upon your experience and performance in the interview process.
Where a new hire falls within a range will be based on their individual skills and experience, and how these competencies compare across other employees in the same role. Bilt's bands are designed to allow for individual compensation growth within the role. As such, new hires typically start at the lower end of the range. Bilt rewards performance and outcomes - should you join the company, you will have the opportunity to grow your salary over time.
The salary range for a Security Engineer is $125,000 - 180,000 and will be eligible for equity and an annual performance-based bonus.
