Security Engineer

Meet the future

Akoya is an API-based network backed by major financial institutions that creates a safer and more transparent way for people to safely send their personal financial data to third-party financial apps. If you are inspired and fascinated by innovative technology that solves complex, real-world problems, then join us as we transform how financial data is accessed and shared. Akoya offers a highly collaborative, fast-paced, and fun working environment and our team is comprised of diverse, creative, and driven professionals with expertise in the banking, securities, fintech, and data aggregation industries. We are an equal opportunity employer. Come join us and be part of this exciting journey – check out www.akoya.com for more information!

The Role

You bring a deep knowledge of the application of cyber security, including data protection and secure infrastructure standards, controls, and technologies. You understand the evolving cyber threat landscape, including known threat actors and advanced attack methodologies and can work with platform and software engineers to inform, develop, and implement solutions to detect and defend against them. You have hands-on experience with the best practices for securing public cloud (AWS, GCP, etc.) infrastructure, including security validation of cloud templates and infrastructure and understand Cyber Security Frameworks and their application, including NIST CSF and CIS.

Responsibilities

• Architect, deploy, and configure security controls and tools to ensure the ongoing protection of all Akoya assets
• Partner with team members and peers in IT in designing security architecture and setting up desired configurations and policies for security technologies
• Research, evaluate and recommend security products, services, and standards to aid with the continued development of the overall Akoya Cyber Program
• Can quickly implement indicators of compromise based on threat intelligence.

Required Experience/Skills

• 3+ years of hands-on experience in cyber security
• Working knowledge of business and technical security controls and their application in a financial services environment.
• Strong written and verbal communication skills.
• Working knowledge of related industry regulatory, privacy, and security standards, frameworks, and best practices, such as NIST Cyber Security Framework (CSF) and SOC2-Type 2 Controls Frameworks.
• Knowledge of cloud-based security controls including security automation within DevSecOps.