Security Engineer at Ona

Purpose

There's no such thing as a "safe system" - only safer systems. Our Site Reliability Engineering team works to create and maintain the safest operating environment for Ona's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and user information. Security Engineers work hands-on with our deployment systems and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

This role will report to the Site Reliability Team

Essential

• Bachelor's degree or equivalent practical experience.
• Experience analyzing the security of systems (penetration testing, Web Application security testing, vulnerability scanning, threat modeling, etc).
• Experience with concepts and practices such as data anonymization and classification, auditing access to data, and review of requests for data access.
• Experience in responding to security problems in target-rich environments, looking at security alerts, front-line analysis and response.
• Experience coding/scripting in one or more general purpose languages including but not limited to: Java, C/C++, C#, Objective C, Python, JavaScript and/or Go.
• 3 years of experience in a related role

Desirable

• Expertise with malware analysis, including investigations of botnet and root-kit behavior.
• Expertise in leading analysis of large data sets and intrusion detection systems.
• Expertise with signals development, threat hunting and threat modeling.
• Experience with developing or analyzing Android applications
• Code maintenance and review experience in one or more general purpose languages.
• Understanding of technical privacy issues (cookie management, encryption), and experience with the software development lifecycle.
• Understanding and history of applying research to real world problems.
• Patience and negotiation skills with a track record of achieving good user outcomes.
• Ability to communicate across disciplines (e.g. engineering, legal, policy).