Staff Security Engineer

Join a leading insurtech company that is unlocking the potential of digital insurance to help everyone protect what matters most! Are you up for the challenge?Founded in 2015, Sure is the fastest growing insurtech behind the world's most sophisticated digital insurance programs. Sure unlocks the power of digital insurance to enable brands and carriers to distribute insurance products quickly on its technology rails, reaching and engaging customers wherever they are on their journey. Our solutions provide a hassle free way to buy insurance anywhere, enabling our partners to make digital insurance accessible to all.

🤝 Culture is everything. Join an incredible team of smart, passionate, collaborative and driven individuals. We empower our teams and promote autonomy and independence wherever we can.🌐 We are remote first. We work from home and we love it!🏆 Strive for greatness. We’ve been named the13th Fastest Growing Company by Deloitte Technology Fast 500, an Inc. 5000 Fastest Growing Company in North America, a two-time Forbes Fintech 50 honoree, and a CNBC World’s Top Insurtech Company, among other accolades and recognitions.💰Funding. In October 2021, we raised $100M in our Series C with a $550M valuation.

We’re growing!You will help design, maintain and evolve the security program to protect Sure from external and internal threats. You are hands on, collaborative, adaptive, detail oriented and thrive in a rapid growth environment.

The ideal candidate is well-rounded in multiple security disciplines. Our philosophy is that you would be teaching us as much as you’d learn from us. By learning and inspiring others, you’ll help cultivate an environment that makes us better at what we do each day.

What you’ll be doing:

• Collaborate with stakeholders across teams, implement and enforce appropriate policies and procedures.
• Maintain our security monitoring solutions and make changes when needed to improve visibility or relevancy of alerting.
• Work with engineers to provide subject matter expertise and contribute to all aspects of architecture, authentication, system security and software design.
• Administer security-related infrastructure and applications, such as intrusion detection/prevention systems, EDR, firewalls and vulnerability scanners.
• Automate security processes and infrastructure when possible.
• Continuously review the design and efficiency of application security controls and develop a program of continuous security improvement relating to SDLC.
• Partner with developers to develop and implement application security standards, patterns and guidelines that support ongoing deliveries.
• Conduct research on emerging products, services, and standards in support of security enhancement and development efforts.
• Help plan and execute a security roadmap.

What we’re looking for:

• 10+ years of InfoSec role in a financial or technology startup.
• Experience securing and utilizing cloud infrastructure (AWS, GCP, Azure).
• Experience hardening and monitoring a Kubernetes cluster.
• Strong knowledge of web application design, development and testing techniques.
• Proficiency in scripting languages, such as Python or Bash.
• Self-directed and self-motivated individuals comfortable working with diverse teams.
• Experience hardening MacOS and Linux Systems, with strong technical understanding of operating system internals.
• Experience with PCI/SOC2/HIPPA audits is a plus.
• Experience implementing security and control frameworks.
• 2+ years responding to security incidents.

What we do for you:

• Unlimited PTO… no really, we want you to take it!
• Mental Health Breaks - company provided meditation app and a weekly wellness hour
• WFH stipend to help you work your best while being remote
• Countless Medical, Dental and Vision plans … we are an insurtech company after all!
• Equity and 401K
• Generous parental leave