Senior Security Engineer

Description

Call Box exists to grow people. We believe that everyone wants to become a better version of themselves, and we work hard to provide a product and a culture that maximizes that growth mindset. We hire smart and ambitious doers and set them loose in an exciting and complex technology business where they will design, architect, build, and support innovative telephony and communications solutions in a dynamic business environment. Our solutions attack one of the biggest business challenges that our customers face: extracting and presenting actionable data and intelligence from phone calls, text messages, and other B2C and B2B communication channels.

Please note: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Job Summary: As a Senior Security Engineer, you will play a crucial role in ensuring the security and integrity of our IT infrastructure and applications. This is a highly technical position requiring expertise in a variety of technologies and systems. You will be responsible for the configuration, management, and maintenance of our security infrastructure, application monitoring systems, and integration of security practices into our CI/CD pipelines. Additionally, you will conduct audits and provide best-practices recommendations to enhance our security posture. 

Requirements

Key Responsibilities: 

• Security Infrastructure Management: 
• Configure, manage, and maintain IT security infrastructure, including firewalls, intrusion detection/prevention systems, and security information and event management (SIEM) systems. 
• Monitor and analyze security logs and alerts to identify and respond to potential security incidents. 
• Application Security: 
• Perform regular security assessments and penetration testing on applications. 
• Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC) and CI/CD pipelines using Azure DevOps. 
• System Security: 
• Ensure the security of Linux and Windows operating systems through regular updates, patch management, and configuration hardening. 
• Manage and secure on-premises Active Directory (AD) and Azure Entra environments. 
• Implement and manage authentication and authorization solutions using Auth0. 
• Security Audits and Compliance: 
• Conduct security audits and vulnerability assessments on existing systems and applications. 
• Provide detailed reports and recommendations to mitigate identified risks and enhance security controls. 
• Ensure compliance with relevant security standards and regulations. 
• Incident Response: 
• Lead incident response efforts, including investigation, mitigation, and reporting of security incidents. 
• Assist in the development and maintenance of incident response plans and procedures. 
• Security Awareness and Training: 
• Provide security training and awareness programs for employees to promote a culture of security within the organization. 
• Stay current with the latest security threats, technologies, and best practices. 

Qualification Requirements: 

Education: 

Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience). 

Experience: 

• 5 years of experience in a senior security engineering role. 
• Proven experience in configuring, managing, and maintaining IT security infrastructure. 
• Strong background in application security. 
• Experience with Azure DevOps pipelines and integrating security into CI/CD workflows. 
• Proficient in Linux and Windows operating systems security. 
• Hands-on experience with on-premises AD and Azure Entra security. 
• Experience with Auth0 or similar authentication and authorization solutions. 

Technical Skills: 

• In-depth knowledge of security principles, practices, and technologies. 
• Strong working knowledge of Amazon Web Services design and security best practices. 
• Expertise in penetration testing and vulnerability assessment tools. 
• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, PCI-DSS). 
• Strong scripting and automation skills (e.g., Python, PowerShell). 
• Excellent problem-solving and analytical skills. 

Soft Skills: 

• Strong communication and interpersonal skills. 
• Ability to work independently and as part of a team. 
• Strong attention to detail and organizational skills. 

Certifications: 

• Relevant security certifications (e.g., CISSP, OSCP) are highly desirable. 

What's in it for you: 

• Remote flexibility 
• Competitive salary package (immediate PTO) 
• Full medical and dental insurance plans 
• Fidelity 401k with company match options 
• Fun perks include a monthly gym reimbursement, a monthly reading allowance, and a monthly wellness allowance 
• Clearly defined opportunities for career growth 
• Mentorship programs with our Executive teams 
• Catered breakfast Thursdays, Employee of the Month rewards, quarterly company events, weekly happy hours 
• Fun and collaborative work environment