Team CompSec is our Cybersecurity and Compliance team, which a Security Engineer is a part of. Our team is responsible for the three pillars of security – confidentiality, integrity and availability. 

There is a saying in Glia – Security is not just a feature, it’s an integral part of our service.

The role

• You will play a very important role in looking after the vulnerability management process at Glia, resulting in an enhanced Information Security posture, greater Customer Trust and increased revenue for the company.
• You will be a member of the CompSec team by supporting ongoing information security activities, collaborating with teams across Glia to resolve security related questions, as well as spreading security awareness across Glia.

The work

A day in the life of a Security Engineer at Glia is always different – you might be helping Compliance with preparations for our upcoming audits, collaborating with fellow Glianeers to solve complex security related questions or conducting ongoing monitoring, assessing and mitigation planning for any vulnerabilities.

Some examples of what you’ll do:

• Collaborate with other teams on implementation of new security policies and procedures and make sure all requirements set by the Security Leadership are met
• Manage, validate and categorize incoming requests from our Bounty Program
• Perform regular vulnerability scans and security control reviews to ensure a continuously strong security posture
• Assist Compliance in ongoing compliance activities and monitoring efforts across different regulations (GDPR, SOC 2, HIPAA, PCI-DSS, CCPA, etc.).

Security Engineers report to the team's Engineering Manager and work closely with the Security Leader and Compliance to contribute to the teams’ Roadmap initiatives. 

CompSec is a remote-first team, as we have team members in Estonia, Spain and Mexico.

Tech you will be working with

• OS: macOS
• MDM: Jamf, Scalefusion
• SSO: Okta
• Infrastructure: AWS
• Vulnerability Detection: Snyk, Sysdig, AlertLogic
• Communication: Zoom, Slack, Confluence, Jira

Requirements

• Understanding of security aspects in cloud infrastructure (AWS, Google Cloud)
• Experience in scripting, preferably Python
• Familiarity with security concepts (encryption, authentication, etc.)
• Good understanding of network protocols and types of network-based attacks
• Experience with handling cyber security incidents

Nice to have

• Familiarity with Terraform, Kubernetes
• Previous experience working with with Information Security audits