Senior Security Engineer

About the Role

As one of the key members of the engineering team, you will have the unique opportunity to redefine the architecture of our suite of products. You will get to work directly with our founding team to deliver the most valuable and joyful experience to our customers. If you are looking to make a real impact on real people’s lives and accelerate your career to new heights in the meantime, then this is the perfect opportunity for you. You will help CurbWaste comply with various data compliances, security audits as the operations expand based on geographical scaling of the product across various cities and states. You will help set up frequency security audits, update to date with latest security updates & vulnerability, automation testing for security flaws & loopholes, and team mentoring. You will develop and standardize industry & enterprise security practices from code to code deployment to cloud infrastructure with fine grained security policies.

About Us

We are an early stage vertical SaaS business dedicated to bringing the most innovative technology to the historically underserved Waste Management Industry. We care deeply about the hard working, dedicated, and humble people of the Waste Management industry and will stop at nothing to ensure that they get the most value technology can offer. We lean on each other to deliver the best value to our customer and we constantly challenge each other to be the best version of ourselves every day. We settle at nothing short of being the best at what we do.

Requirements

What you will do

• Review current security protocols and identify security threats, vulnerabilities, loopholes, and gaps
• Devise security testing strategies and implementation along with QA & DevOps team
• Responsible for security standards, best practices, and design docs implementation and rollout
• Educating and mentoring team on security best practices, and latest security threats
• Participate & communicate with agencies/institutions and keep updates on latest security and data compliance
• Communication with clients and maybe work with their concerned individuals for security Q&As

What you will need

• Extensive experience with AWS cloud infrastructure security - S3, EC2, ELB & Scaling groups, IAM, VPC, AWS WAF
• Configuring, deploying, and maintaining vulnerability scanning technologies. E.g. Qualys, Tenable, Sysdig
• Experience in server, networking, and container infrastructure scanning.
• Supporting vulnerability assessment initiatives to determine risk, potential false positives
• Knowledge of Terraform, AWS CloudFormation, or other cloud automation tools
• Hands on development experience in one or more of Java, JavaScript, Node.js, Go, or Python languages is highly preferred for debugging and finding security threats & bugs
• Work with other senior team members to devise and execute dependency management & scanning, automation of security testing in DevOps pipeline
• Knowledge of Cloud-specific Compliance & Governance standards and industry best practices and their implementation ex SOC 2, Encryption at REST
• Be aware of current CVEs, potential attack vectors, and vulnerabilities, and apply patches or educate team as soon as possible

Benefits

What We Offer

This is not just a job. This is a career, a chance to make a direct impact. Here’s how we help:

• Flextime, recognition, and support for autonomous work: Flexible time off with ample learning and development opportunities to continue growing your career.
• Competitive salary

Our Mission

We aim to change the way waste companies run their business. We are a software founded by haulers and built for haulers. We care about the environment and want to play a positive role in the future of the waste industry. Software helps create solutions and we are focused on being the leaders in change.

At CurbWaste we celebrate individuality and uniqueness. We believe that the convergence of fresh perspectives and experiences from all walks of life is what makes our product and culture so great. We strongly encourage people from underrepresented groups to apply. We do not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.