Engineering Manager, Secure Cloud Engineering at ActiveCampaign
What your day could consist of:
- Works in conjunction with the CISO to execute on the organization’s security strategy and vision across ActiveCampaign’s global locations
- Hands-on technical leadership for a team of global Security Cloud Engineers (SCE), playing a key role in ensuring consistent implementation of security controls and design principles
- Leads the SCE team to drive security related initiatives including, but not limited to creating/maintenance of security policies, implementation of security procedures/controls, and monitoring in alignment with security standards
- Leads the design, deployment, management and improvement of critical security infrastructure services/tools (examples: encryption, authentication and authorization, PKI, secrets management, logging, detection, OS hardening, access controls and patch management) and as required by business need
- Assists the SecOps team by partnering with Engineering and IT to understand, scope, prioritize and remediate vulnerabilities
- Partners with the production operations team on securing and best practices to implement and maintain cloud infrastructure security environments
- Provides advisory services, as a security subject matter expert to investigate, design/architect, and implement cloud security architectures and capabilities, including repeatable security controls and other engineering best practices (ISO, SOC2, GDPR, PCI-DSS) as they are identified & required
- Reviews technology solutions with Engineering and IT teams, focusing on security design, network architectures, security policies and standards, cybersecurity risk frameworks and data protection; taking domestic and global regulatory requirements into account
- Performs vendor evaluations and proof of concepts for service improvements, in-flight projects and emerging technologies
- Builds, maintains and suggests improvements for the legacy and modern security services, including network infrastructure and physical and virtual environmentsCreates a collaborative work environment that fosters partnership with other departments, autonomy, quality, inclusivity, innovation, learning, respect and transparency
- Works with Security Operations to perform incident triage, determine scope, urgency, and potential impact of security incidents
- Shares knowledge with team members via a formal mentoring relationship, by creating/reviewing design docs, giving technical talks and feedback
- Works with internal and external auditors for compliance initiatives
- Works with the Compliance Team to perform security gap assessments and implement remediations
- Works internally and externally to scope and complete infrastructure vulnerability scans and pen tests and works with Engineering teams on identified vulnerability remediation
- Monitors industry security updates, changes, technologies, emerging threats and best practices for continuous improvement
- Works closely with the ActiveCampaign People Team to hire highly skilled candidates from diverse backgrounds
What is needed:
- 5+ years of experience in Infrastructure and Information Security in physical and cloud environments
- 5+ years working on AWS running multiple production workloads
- 3+ years of hands-on technical leadership and people management experience
- Experience with various security technologies, (examples: encryption, authentication and authorization, PKI, secrets management, logging, detection, OS hardening, access controls and patch management)
- Experience with applications for monitoring infrastructure security and detecting intrusions
- Experience with incident response, threat modeling, and mitigation
- Working knowledge of common information security management frameworks such as SOC2 and ISO 27001
- Experience designing and implementing access control models for privileged access in fast-paced AWS cloud environment
- Experience with AWS security best practices and security controls using AWS services IAM, SSO, VPC, etc
- Experience with common internet protocols such as DNS, SMTP, LDAP, etc
- Self-motivated and strong sense of ownership of tasks
- Bachelors or Masters' degree in Computer Science or Information Security or equivalent work experience
- Experience building and deploying scalable applications in the cloud using CI/CD practices in several scripting languages
- Solid experience in Terraform
- Experience solving challenging technical problems with a focus on throughput and fast response time
- The ability to adapt quickly to changes in business requirements and work in an agile environment
- Proven experience to fail fast/build quickly with accuracy mentality
- You have worked on and/or understand distributed systems and large scale engineering challenges
- Strong communication and collaboration skills with a focus on the customer