Senior Infrastructure Security Engineer

Company: Upside
Location: Austin
Posted on: June 25, 2022

Job Description:

Meet UpsideUpside is a retail technology company that uses personalized cashback promotions to bring shoppers more value and proven profit to brick and mortar businesses. As millions of shoppers earn 2 to 3 times more cashback with Upside than any other product, businesses nationwide earn more profit without changing their business models. Many other brands use the Upside Partner Platform to power their own app experiences, leaning on Upside's proven methodology to help shoppers and businesses do better. Upside is headquartered in Washington, D.C., and has driven hundreds of millions of dollars back into our local communities nationwide.Meet Upside EngineeringThe Engineering team at Upside is a close-knit group of hardworking, fast-learning individuals that believes in our mission to help communities thrive. We believe in a data-driven approach to decision-making and an encouraging culture that emphasizes learning from our mistakes. We debate and deliberate on the best ideas to improve our tech stack, and strive for an inclusive atmosphere that champions the psychological wellness of all of our teammates.About The JobThe Infrastructure and Information Security teams are responsible for identifying risks and implementing mitigations across all Upside products. We work closely with both development and operations to ensure security is built into the infrastructure that runs the Upside platform.As part of this team, we expect to drive a "shift left" approach to security, where teams are given all the resources they need to make good security decisions, and to deploy software quickly and safely. The most valuable contributions are those that address common security issues systematically, and at scale through frameworks, tooling and automation. We implement technical controls in support of the security policies and standards developed by the InfraSec team, and deliver security services, tools, and automations to enable detection and enforcement of security controls across the various platforms in Upside's production networks.Our Tech Stack

• AWS, Kubernetes (EKS)
• Terraform / Terragrunt
• Lacework, Whitesource
• Linux (Alpine, Amazon Linux 2, a smattering of Ubuntu boxes)
• Python, Bash
• Tines.ioWhat You'll Do
  • Consult with infrastructure, service owners and operations teams to provide guidance and recommend infrastructure security design solutions.
  • Perform security assessments on new and existing products and services to identify security risks and establish baseline security requirements.
  • Execute existing security standards across Upside to improve security and resiliency of software and systems architecture.
  • Advocate for and lead complex security projects from inception through completion, working closely with engineering, product, and program managementWhat You Need
    • 7+ years of progressively responsible experience in the area of security tools development or infrastructure security architecture and design. Most recent roles should reflect direct, hands-on experience with infrastructure security.
    • The ability to connect with engineering teams as a confident and empathetic subject matter authority.
    • Experience with securing AWS: VPCs, IAM, CloudTrail, Security Groups, Route Tables, Security Hub, etc.
    • Demonstrated technical expertise in two or more of the following areas: AWS Compliance monitoring & improvement (e.g. CIS Benchmark v1.2.0), Linux OS hardening, Kubernetes hardening, Forensic investigations, Securing CI/CD pipelines (specifically, Jenkins).The Fine Print
      • Upside employees are currently working from home during the COVID-19 pandemic. Afterwards our engineering teams are adopting a hybrid approach which can support full-time remote work while enabling in-person meetups as necessary.
      • Notice to recruiters and placement agencies: This is an in-house search. Please do not submit resumes to any person or email address at Upside. Upside is not liable for, and will not pay, placement fees for candidates submitted by any party or agency other than its approved recruitment partners.At Upside, we believe that diversity drives innovation. Our differences are what makes us stronger. We're passionate about building a workplace that represents a variety of backgrounds, skills, and perspectives and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Everyone is welcome here, come join us!

Keywords: Upside, Austin , Senior Infrastructure Security Engineer, Engineering , Austin, Texas