Jobs
>
San Francisco

    Senior Security Engineer - San Francisco, United States - Ethos

    Default job background
    Description

    About Ethos Company

    Ethos was established with the mission of simplifying and expediting the process of securing life insurance for a million families. Our unique approach combines industry knowledge, cutting-edge technology, and personalized care to tailor the perfect insurance policy that safeguards your loved ones.

    By harnessing advanced technology and data science, we have revolutionized the life insurance journey, making it more user-friendly and convenient. Through predictive analytics, we have transformed what used to be a time-consuming process into a quick and modern digital experience that now only takes minutes. We have issued billions in coverage monthly, breaking down the traditional barriers and propelling the industry into the contemporary era. Our comprehensive technology platform serves as the cornerstone of family financial well-being.

    We strive to make acquiring life insurance simpler, quicker, and superior for all.

    About the Position

    Joining the Ethos Trust and Safety team, you will play a vital role in developing various security services and conducting technical security risk evaluations to support the core Ethos product. Your responsibilities will involve designing and constructing internal security protocols and frameworks. This position will be instrumental in implementing diverse security controls aligned with fundamental security principles like least privilege, defense in depth, segregation of duties, and zero-trust architecture.

    Key Responsibilities:

    • Design, implement, and deploy security mechanisms to counter adversarial assaults, data breaches, and other security risks
    • Create robust threat detection, monitoring, investigation workflows, response architectures, and components of the security analytics platform
    • Monitor and assess operational/security alerts
    • Execute Threat Modeling, Design Reviews, and Security Testing
    • Communicate risks to the engineering team through training and demonstrating vulnerabilities and secure design patterns
    • Collaborate with the DevOps team to automate security controls on the Ethos infrastructure/platform
    • Manage the vulnerability lifecycle across infrastructure, platform, and application levels
    • Engage in investigations, threat hunting, and incident response activities; develop playbooks for specific incident response scenarios
    • Support compliance tasks such as SOC2 control implementation and testing, vendor risk assessments, etc.

    Requirements and Skills:

    • 5+ years of continuous, relevant InfoSec experience
    • In-depth familiarity with AWS cloud security, with a background in automating security procedures in cloud environments
    • Proficient in threat modeling, design reviews, and security testing for various applications, technologies, and platforms
    • Hands-on experience with CI/CD and DevOps tools
    • Capability to script automations, preferably in multiple languages
    • Experience in vulnerability/threat management across infrastructure, platform, and application tiers
    • Proficiency in penetration tests/red team exercises, particularly those involving manual verification, exploitation, lateral movement, etc.
    • Expertise in event management/SIEM solutions and data modeling related to establishing event detection and alerting capabilities
    • Ability to be present at our San Francisco, CA office once a week

    The US national salary bracket for this full-time role ranges from $165,000 to $221,000. Please note that the salary figures listed pertain solely to the base salary and do not encompass bonuses, equity, or benefits.

    If you're not the perfect match for every requirement but are enthused about this position, we encourage you to apply anyway. At Ethos, we are committed to building a diverse, inclusive, and genuine work environment.

    We are proud to be an equal opportunity employer that champions diversity and inclusion, seeking candidates who appreciate, embrace, and thrive in a multicultural milieu. We uphold a policy of non-discrimination based on race, religion, nationality, gender, sexual orientation, age, marital status, veteran status, or disability status. In compliance with the SF Fair Chance Ordinance, we will assess qualified applicants with prior arrests and convictions for employment.

    To find out more about the data we gather and its usage, please consult our California Candidate Privacy Notice.


  • Integriti Group Pvt Ltd

    Security Engineer

    1 week ago


    Integriti Group Pvt Ltd San Francisco, United States

    Key Responsibilities: · Cloud Security Architecture: Design and implement comprehensive security architectures for cloud-based applications and services, ensuring adherence to best practices and compliance requirements.New Relic Integration: Utilize New Relic or other tools to m ...


  • Maven Companies Inc San Francisco, United States Permanent

    IT Security Engineer (JD Attached) 6 months +HIGHLY PREFERRED: Hybrid, 5 days a week for 1st couple of weeks to get to know team and environmentWill consider remote, but need to travel in Miami, FLTeam please see JD attached and notes for Security Engineer for Enod ...

  • NCC Group (Americas), Inc

    Security Engineers

    3 weeks ago


    NCC Group (Americas), Inc San Francisco, United States

    Security Engineers · Company: NCC Group (Americas), Inc · Location: San Francisco, CA · Position Type: Full Time · Experience: 1 year · Education: MS · NCC Group (Americas), Inc. seeks Security Engineers w/MS and min. 1 yr experience sought for positions in San Francisco. Salary ...

  • Asana

    Security Engineer

    3 weeks ago


    Asana San Francisco, United States

    We're looking for a motivated security engineer interested in maturing Asana's product security posture to expand trust with our growing customer base. As a member of the Product Security team, you will focus on shipping features that are free from critical security bugs, enablin ...

  • Notion, LLC

    Security Engineer

    2 weeks ago


    Notion, LLC San Francisco, United States

    About Us: · We're on a mission to make it possible for every person, team, and company to be able to tailor their software to solve any problem and take on any challenge. Computers may be our most powerful tools, but most of us can't build or modify the software we use on them e ...

  • Bastion

    Security Engineer

    7 hours ago


    Bastion San Francisco, United States

    About Bastion · Bastion enables businesses and enterprises to offer the next generation of on-chain and off-chain products via its powerful API and cutting-edge technology stack, unlocking the full potential of digital interactions for everyone. From startups to enterprises, Bast ...

  • Figma

    Security Engineer

    2 weeks ago


    Figma San Francisco, United States

    Figma is growing our team of passionate people on a mission to make design accessible to all. Born on the Web, Figma helps entire product teams brainstorm, design and build better products - from start to finish. Whether it's consolidating tools, simplifying workflows, or collabo ...


  • Aspiron Search San Francisco, United States

    Product Security Engineer · Location: San Francisco, Financial District - Onsite Full-Time · Comp: $240-$280k base + equity · Want to be an early member of a Security team for one of the fastest revenue-growing SaaS startups in history? · How does working with a world-class team ...


  • Amazon Development Center U.S., Inc. San Francisco, United States Full time

    Go beyond protecting Amazon Web Services (AWS) and have a direct impact on new cutting-edge initiatives at Amazon. Work across multiple security domains as well as strategic security partnerships. Since 2006, our great team at AWS has been enabling our customers to bring great id ...


  • Innova Solutions San Francisco, United States

    Innova Solutions is immediately hiring for Mainframe Security Engineer with RACF · Position Type: Contract/Fulltime/W2 · Duration: 24+ Months · Position: Mainframe Security Engineer with RACF · Location: 100% Remote · As a Mainframe Security Engineer, you would:- · Provide comple ...


  • BHO Tech San Francisco, United States Full time

    s the Principal Security Engineer you will help create and maintain automated tooling, processes, and procedures that integrate into our SDLC process. To apply for the role, you should possess strong analytical, design, and problem diagnosis skills. You like thinking "outside the ...


  • TREE House San Francisco, United States

    We're looking for a motivated security engineer interested in maturing Asana's product security posture to expand trust with our growing customer base. As a member of the Product Security team, you will focus on shipping features that are free from critical security bugs, enablin ...

  • Encore IT Solutions

    Security Engineer

    1 week ago


    Encore IT Solutions San Francisco, United States Permanent

    Role: Security EngineerLocation: Remote WORKING IN USA FOR MORE THAN 7 YEARS -Integrating various platforms with CyberArk, such as different LDAP providers, Windows servers, UNIX servers, Databases and networking client's Privileged Access Management solution based on CyberArk te ...

  • Motion Recruitment

    Security Engineer 1

    2 weeks ago


    Motion Recruitment San Francisco, United States

    A large enterprise social network is hiring a Security Engineer I to join the Security Team based in office in San Francisco with work from home flexibility. · The Security Engineer will be responsible for reviewing and processing security related requests including Access Manag ...


  • Opal Security San Francisco, United States

    Opal is building the next generation of access management. We've all felt the pain of not getting the access we need to do our job. At Opal, we're building a central hub for authorization to make access management automated, intelligent, and easy to use. We are taking an age old ...


  • TaxBit West Valley City, United States

    Company · Founded in 2018 by CPAs, tax attorneys, and software developers, TaxBit is creating an entirely new category to enable widespread compliant adoption of digital assets for the global economy. TaxBits Software-as-a-Service (SaaS) platform streamlines and automates custom ...


  • Unit21 San Francisco, United States

    About Unit 21: · Unit21 protects businesses against adversaries engaging in money laundering, fraud, and other sophisticated risks by offering a no-code toolset to model, detect, and remediate suspicious activity. We are backed by investments from Google, Tiger Global, ICONIQ, D ...


  • Crusoe Energy Systems San Francisco, United States

    Crusoe Energy is on a mission to unlock value in stranded energy resources through the power of computation. · Take a look at what we do - · We aim to align the long term interests of the climate with the future of global computing infrastructure. As data centers consume an ex ...


  • Motion Recruitment San Francisco, United States

    Outstanding long-term contract opportunity A well-known Financial Services Company is looking for a Information Security Engineer in San Francisco (Hybrid). · Work with the brightest minds at one of the largest financial institutions in the world. This is long-term contract oppo ...


  • Carta San Francisco, United States

    The Company Youll Join · Carta is a platform that helps people manage equity, build businesses, and invest in the companies of tomorrow. Our mission is to unlock the power of equity ownership for more people in more places. · Carta is trusted by more than 40,000 companies and o ...