Easy Apply
Be an Early Applicant
Do impactful research on any timeline with Dscout.
The Role
Build and maintain cybersecurity controls across Dscout’s SaaS environment and internal IT systems. Secure AWS infrastructure and software development processes, implement SIEM and monitoring, assess threats, respond to incidents, manage vulnerabilities, support security policies and third-party risk reviews, and improve security awareness and controls.
Summary Generated by Built In
At Dscout, we’re building the most flexible and powerful UX research platform on the market—trusted by the world’s top brands in finance (JP Morgan Chase, Intuit, Charles Schwab, PayPal), healthcare (Aya, Headspace), consumer goods (Keen, Verizon, Target, Northface), and tech (Google, Amazon, Facebook, Meta, Spotify, AirBnB). Our tools help teams deeply understand the humans behind their products, so they can build better ones. We are expanding our smart and driven team and would love for you to join us.
We are looking for a Cybersecurity Engineer to become a part of the Cybersecurity team reporting to the VP, Compliance and Information.
The Cybersecurity Engineer will contribute to reducing risk within the Dscout SaaS environment and internal IT systems. This includes planning and implementing cybersecurity controls, supporting cybersecurity operations, and monitoring the threat landscape. This role will ensure Dscout controls operate effectively over time.
What You Will Do:
- Lead the process to build security into the Dscout SaaS environment. This includes applying security throughout the software development lifecycle.
- Collaborate with Engineering to plan and implement cybersecurity controls to protect the SaaS environment. This includes applying leading practices to secure AWS resources (e.g., VPCs, EC2 instances, and containers).
- Continually enhance security monitoring of the SaaS environment and internal IT services by implementing SIEM and working with Engineering to continuously improve logging and auditability.
- Assess evolving threats and develop recommendations to mitigate risk to Dscout. You will provide weekly threat intelligence reports highlighting potential risk to the organization.
- Work side-by-side with Engineering to analyze, contain, and mitigate cyber attacks and other related incidents.
- Perform vulnerability monitoring and, where appropriate, ensure remediation.
- Participate in the development of security policies and processes.
- Assist third party risk reviews.
- Provide recommendations to continually improve security controls.
- Assist in development of security programs and efforts to promote security awareness.
What You Will Need To Have (we can call them Desired Skills and Background):
- Experience working with developers to conduct security reviews and provide strong recommendations to manage risk. This includes a strong understanding and practical use of OWASP Top 10 (web and AI).
- Experience securing AWS cloud environments and infrastructure as code solutions such as Terraform.
- Proven ability to implement security monitoring tools such as Datadog. This includes the ability to identify relevant scenarios and ensure proper logging.
- Experience responding to cyber attacks such as bots and account compromise as well as threats like data leakage and infected computers.
- Strong knowledge of cloud computing environments.
- Working knowledge of security in software development and continuous integration/continuous delivery (CI/CD).
- Experience documenting and implementing security policies and processes.
- Knowledge of security frameworks and standards: ISO 27001, NIST, or SANS preferred.
- Experience with HITRUST and/or SOC 2 certification is preferred.
- Good communication, documentation and presentation skills.
- Limitless curiosity and insatiable appetite to understand human behavior and relevant technologies.
Background
- Bachelor's degree is preferred
- CISSP, CCSP, or GIAC security certification preferred
- A minimum of 3 years of security experience
Of course, what is outlined above is an ideal set of expectations; however, business needs and other projects and tasks may shift, and additional tasks could be assigned at the discretion of your manager.
About Dscout
Dscout is a team of passionate, empathetic, and curious professionals. As a recognized leader in the Forrester Wave, we’re at the cutting edge of experience research technology. The power of research drives us - how in-context insights from real people can build more enjoyable products and services.
We prioritize learning, sharing, and building. We also deeply value being a diverse and inclusive team and company and look for team members who align with that belief. Join our dynamic team and help shape product roadmaps and business strategies for the world’s most loved brands.
It doesn't stop there. When you join the Dscout team, you will get:
- A strong and competitive compensation package with a built-in bonus and equity program.
- An incredible and progressive benefits package (for both you and your dependents) to support work/life balance, including flexible PTO, 15 company holidays, 12 weeks of paid parental leave, 401k match, and much more.
- An education stipend to support your growth & development, and a remote work stipend.
- A company that is open and transparent with our team. You will know what is happening and why it matters.
Dscout is an equal-opportunity employer that values diversity. We do not discriminate based on identity, including race, color, religion, national origin or ancestry, sex, gender identity and expression, age, physical or mental disability, pregnancy, veteran or military status, unfavorable discharge from military service, genetic information, sexual orientation, marital status, order of protection status, citizenship status, arrest record or expunged or sealed convictions, or any other legally recognized protected basis under federal, state, or local law.
If you need reasonable accommodations for any part of the employment process, please email us at [email protected] with the nature of your request and your contact information. We'll do everything possible to ensure you're well-prepared for success during our interview process, while also upholding your privacy, including accommodating any special requests. Please note that only inquiries regarding requests for reasonable accommodation will be responded to from this email address.
When you apply at Dscout, we will process your job applicant data, including your employment and education history, transcript, writing samples, and references, as necessary to consider your job application for open positions. For more information about our privacy practices, please visit our Privacy Policy.
Dscout participates in the E-Verify program in certain locations, as required by law.
Location Flexibility: Dscout is proud to support a remote-first workforce and enable employees to work from almost anywhere. At this time, however, we are unable to hire in the following locations: Montana, Hawaii, Alaska, and Washington DC.
Location Flexibility: Dscout is proud to support a remote-first workforce and enable employees to work from almost anywhere. At this time, however, we are unable to hire in the following locations: Montana, Hawaii, Alaska, and Washington DC.
NOTE: DSCOUT NEVER CONTACTS JOB APPLICANTS VIA TEXT, MESSENGER, OR OTHER SIMILAR APPLICATIONS. BE AWARE OF PHISHING AND SPOOFING SCAMS, BOTH VIA TEXT AND EMAIL. ONLY RESPOND TO EMAILS FROM DSCOUT.COM
Skills Required
- At least 3 years of security experience
- Experience conducting security reviews with developers and applying OWASP Top 10 practices
- Experience securing AWS cloud environments and infrastructure as code using Terraform
- Experience implementing security monitoring tools such as Datadog and ensuring appropriate logging
- Experience responding to cyberattacks, account compromise, data leakage, bots, and infected computers
- Strong knowledge of cloud computing environments
- Working knowledge of software security and CI/CD
- Experience documenting and implementing security policies and processes
- Knowledge of ISO 27001, NIST, or SANS security frameworks and standards
- Experience with HITRUST and/or SOC 2 certification
- Strong communication, documentation, and presentation skills
- Bachelor's degree
- CISSP, CCSP, or GIAC security certification
What the Team is Saying
Kyli Herzberg
Senior Director, Customer Succes
Anneliese Hernandez
Lead Software Engineer
Jess Mons
Senior Director, Data
Michael Winnick
CEO and Founder
Gardo Roman
Senior Software Engineer
Michelle Huang
Director, Legal
Matthew Moczarny
Senior Accountant
Dscout Compensation & Benefits Highlights
-
Healthcare Strength — Healthcare coverage is described as comprehensive, with medical, dental, and vision insurance and the company covering a significant majority of premiums. Feedback suggests mental health resources and disability coverage further bolster the healthcare package.
-
Retirement Support — A 401(k) with a 100% match up to 4% is highlighted. Feedback suggests both pre-tax and Roth options are available, strengthening long-term financial support.
-
Leave & Time Off Breadth — Flexible/unlimited PTO, encouragement to take at least four weeks, 16 paid holidays, and a 10-week sabbatical after long tenure are noted. Feedback suggests up to 12 weeks of fully paid parental leave adds meaningful family support.
Dscout Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Dscout helps companies better understand the experiences people have with their products and brands in everyday life. Our SaaS video research platform helps our customers gather, manage, share and analyze millions of in-context moments submitted by people around the world.
Why Work With Us
Curious. Empathetic. Smart. We are a crew of curious humans helping the world's most beloved brands become more customer-centric. If this gets you excited, we'd love to hear from you!
Gallery
Dscout Offices
Remote Workspace
Employees work remotely.
Dscout’s goal is to provide team members with the flexibility to decide their best way of working, meaning we operate as a remote-first company!
Typical time on-site:
None
