Dscout
More roles at DscoutCybersecurity Engineer
Remote role where the employee must remain based in a particular country.
Listed for United States
From the listing details: Residency required in United States
Employer listed it 4 days ago · Added 2 days ago
First listed 4 days ago and still open.
Salary
Not stated
Location
Listed for United States
Timezone
Not stated
Contract
Full-time
Experience
Mid
Category
Operations
The employer did not publish a salary, and we have too few comparable roles to estimate one.
What the advert says
Quoted word for word from the employer's advert. Where it says nothing, we say so.
- Working hours
- Not mentioned in the advert
- Where you can work from
- Location eligibility not confirmed
- Contract
- Not mentioned in the advert
- Experience asked for
- Not mentioned in the advert
- Pay
- Not mentioned in the advert
Remote flexibility
Work from home
This is a remote role, but the employee must be based in United States. It is work from home rather than work from anywhere.
What the employer says
- Source listing states candidate location: "Remote, Remote - US"
What Nomaders makes of it
- Residency required in United States
- Payroll and tax are likely handled in that country only
The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.
Before you apply
Experience: employer states
Written as a requirement
- “A minimum of 3 years of security experience”
Written as a nice-to-have
- “Experience with HITRUST and/or SOC 2 certification is preferred.”
Questions worth asking: Nomaders interpretation
- The advert does not say where you can be based. Ask which countries they can legally employ or contract you from.
- No pay is stated. Ask for the salary range before investing time in interviews.
- The advert does not say whether this is employment or a contractor arrangement. Ask, as it affects tax and benefits.
Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.
About the role
At Dscout, we’re building the most flexible and powerful UX research platform on the market—trusted by the world’s top brands in finance (JP Morgan Chase, Intuit, Charles Schwab, PayPal), healthcare (Aya, Headspace), consumer goods (Keen, Verizon, Target, Northface), and tech (Google, Amazon, Facebook, Meta, Spotify, AirBnB). Our tools help teams deeply understand the humans behind their products, so they can build better ones. We are expanding our smart and driven team and would love for you to join us.
We are looking for a Cybersecurity Engineer to become a part of the Cybersecurity team reporting to the VP, Compliance and Information.
The Cybersecurity Engineer will contribute to reducing risk within the Dscout SaaS environment and internal IT systems. This includes planning and implementing cybersecurity controls, supporting cybersecurity operations, and monitoring the threat landscape. This role will ensure Dscout controls operate effectively over time.
What You Will Do:
Lead the process to build security into the Dscout SaaS environment. This includes applying security throughout the software development lifecycle.
Collaborate with Engineering to plan and implement cybersecurity controls to protect the SaaS environment. This includes applying leading practices to secure AWS resources (e.g., VPCs, EC2 instances, and containers).
Continually enhance security monitoring of the SaaS environment and internal IT services by implementing SIEM and working with Engineering to continuously improve logging and auditability.
Assess evolving threats and develop recommendations to mitigate risk to Dscout. You will provide weekly threat intelligence reports highlighting potential risk to the organization.
Work side-by-side with Engineering to analyze, contain, and mitigate cyber attacks and other related incidents.
Perform vulnerability monitoring and, where appropriate, ensure remediation.
Participate in the development of security policies and processes.
Assist third party risk reviews.
Provide recommendations to continually improve security controls.
Assist in development of security programs and efforts to promote security awareness.
What You Will Need To Have (we can call them Desired Skills and Background):
Experience working with developers to conduct security reviews and provide strong recommendations to manage risk. This includes a strong understanding and practical use of OWASP Top 10 (web and AI).
Experience securing AWS cloud environments and infrastructure as code solutions such as Terraform.
Proven ability to implement security monitoring tools such as Datadog. This includes the ability to identify relevant scenarios and ensure proper logging.
Experience responding to cyber attacks such as bots and account compromise as well as threats like data leakage and infected computers.
Strong knowledge of cloud computing environments.
Working knowledge of security in software development and continuous integration/continuous delivery (CI/CD).
Experience documenting and implementing security policies and processes.
Knowledge of security frameworks and standards: ISO 27001, NIST, or SANS preferred.
Experience with HITRUST and/or SOC 2 certification is preferred.
Requirements
- ·Experience working with developers to conduct security reviews and provide strong recommendations to manage risk. This includes a strong understanding and practical use of OWASP Top 10 (web and AI).
- ·Experience securing AWS cloud environments and infrastructure as code solutions such as Terraform.
- ·Proven ability to implement security monitoring tools such as Datadog. This includes the ability to identify relevant scenarios and ensure proper logging.
- ·Experience responding to cyber attacks such as bots and account compromise as well as threats like data leakage and infected computers.
- ·Strong knowledge of cloud computing environments.
Benefits
No benefits package published with this listing. Ask about it at first interview.
How to apply
- 1Check the flexibility label above, work from home, matches where you plan to live and work.
- 2Tailor your CV to the role at Dscout, mentioning your remote working experience.
- 3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.
Found 3d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.
Listing sourced from Company boards.
Similar roles
Other open operations roles with comparable remote rules.
Pay not stated · You'll be taken to the employer's careers page.