About us:  

Limeade is an employee experience software company on a mission to transform work into a source of positivity, energy, humanity, and purpose. Founded in 2006, Limeade is a pioneer in the HR technology industry and is consistently recognized for its own award-winning culture. Today, Limeade solutions are used in approximately 100 countries around the globe. We help every employee know their company cares - and deliver people and business results that matter. Limeade partners with its customers to transform the overall employee experience by helping to improve employee well-being, engagement, and sense of inclusion - in addition to reducing the risk of unwanted turnover and burnout. To learn more, visit www.limeade.com (AXS listing: LME)

About the role:

Limeade is seeking a Security Architect to join our Information Security and Operations team.  The team is responsible for ensuring the security of Limeade’s solutions and corporate information resources, providing scalable platform and corporate infrastructure solutions and support, and monitoring infrastructure performance and utilization.

As our company grows, so does the opportunity to work with a wide range of leading edge technology.  This is a fast paced environment.  If you like to apply your knowledge of information security, web applications, and public cloud technology to solve tough problems while working with smart, talented people, you’ll enjoy Limeade.

Responsibilities:  

• Engage with customer and partner teams at the organizational level to understand their high-level business objectives and identify potential areas of impact for Security.
• Operate across multiple product teams, developing security architecture patterns for devising, implementing, and communicating a well-rounded approach to Application Security efforts at Limeade.
• Be able to identify security flaws in software and scan for vulnerabilities and work with the development team to fix code from a security standpoint.
• Develop, implement, and maintain product security strategy for a range of fast-moving web applications.
• Provide recommendations to update existing, or create new, processes and procedures to improve security testing practices You’ll share responsibility for Key Performance Indicators and Key Risk Indicators- defining and socializing them, ensuring that they’re an internalized part of our way of working, and helping partners understand what they represent.
• Manage the plan to periodically evaluate existing applications and implement any remediations for reported vulnerabilities
• Ability to interact with business stakeholders, system integrators and external service providers

Requirements:

• Ability to demonstrate our values in an on-going and consistent way
• You possess a deep understanding of how to translate product and business goals into tech and how to stay focused on the most impactful.
• 5 or more years of recent, relevant experience with Azure cloud computing platform, including leveraging cloud native security controls to meet security requirements. Knowledge of comparable AWS controls is an asset.
• Solid understanding of Zero Trust security models, as well as public cloud “Well Architected” frameworks.
• Familiarity with security principles and practices for containers and container clusters (e.g. Docker, Kubernetes, etc.).
• Experience working in an agile environment with development teams building applications written in C#/.Net, HTML5 and JavaScript. Hands-on coding experience in C#/.Net or Java is an asset.  Experience with two or more scripting languages such as shell scripting, Python, PowerShell preferred.
• Strong experience in software composition analysis, vulnerability management, security standards, and best practices (ex. OWASP).
• Experience with application threat modeling or other risk identification techniques.
• Solid understanding of information security standards such as NIST, ISO27001/27001, CIS, privacy regulations such GDPR, CCPA, HIPAA. Experience supporting compliance auditing processes such as SOC, ISO.
• Ability to adapt and work effectively with a variety of situations and technologies.
• Strong desire to expand technical knowledge and keep up with security trends.
• You have a diverse set of leadership tools, experience mentoring and supporting peers and engineering teams, encouraging the best engineering practices, and leading by example.
• Participation in on-call rotation and occasional after hours work as required.

Limeade provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, pregnancy, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Limeade will provide reasonable accommodations for qualified individuals with disabilities. 

Please Note: Limeade is currently unable to support visa sponsorship for those living in the United States and working under an H1B visa. 

#LI-Remote