Security Operations Engineer
As a Security Engineer at Red Ventures, you will be a core player who participates in and leads multiple security efforts. You will work closely with development teams, product managers, and our enterprise teams to ensure that Red Ventures brands and products are secure. You will proactively identify and assess security risks and advise technical teams on mitigation strategies while being a great person to work with.
What You'll Do:
- Advise product, platform engineering, application development, and IT teams as their security SME, guiding Red Ventures standards and industry best practices.
- Design and implement the detections and controls to defend against well-documented and emerging threats.
- Drive the vulnerability remediation/patch management process within an industry group
- Triage detection events and lead incident remediation
- Leverage cutting-edge endpoint detection and response tools to detect malicious activity and efficiently respond to threats
- Work with multiple teams within an industry group, translating security requirements into terms both non-technical and technical implementers can use
- Work with a broad group of both development teams and non-technical personnel to translate complex security requirements into positive security outcomes
- Lead initiatives to holistically address multiple security vulnerabilities or gaps found in a functional area.
- Assist in penetration testing planning and engagements
- Assess the latest security tools using good research practices, especially strongly defendable objective metrics, wherever possible.
- Help drive existing security initiatives in Developer, Application, Cloud, Network, Host and SaaS Security.
- Provide input and help shape company-wide security policies, standards, and initiatives
What We're Looking For:
- Must have 4 years of practical experience in Cyber Security OR a Bachelor’s Degree in Computer Science, Computer Engineering, Information Technology, or a related field with 1-2 years of experience in Cyber Security.
- Experience with EDR platforms and responding to alerts/incidents accordingly
- Strong understanding and experience with standard security libraries, security controls, and common security flaws.
- Strong experience in remediating or coordinating the remediation of common security vulnerabilities in configurations, service platforms (CVEs) and/or application source code.
- Experience implementing security solutions that resolve security and account for business risk trade-offs
- Strong development or scripting experience and skills.
- Familiarity with security frameworks such as NIST CSF, ISO 2700x, CIS 18, etc.
- Excellent professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.
Even Better:
- Strong understanding of and hands-on experience with cloud infrastructure/networking, related security controls, and best practices (AWS, GCP a plus).
- Experience with OWASP, static/dynamic analysis, and standard secure application development practices.
- Be able to think both offensively (red team operations) and defensively (evaluating product security and security architecture)
- Advanced detection engineering knowledge and experience, especially for singular detections that leverage multiple data sources.
Compensation
- Cash Compensation Range: $100,000 -150,000 *Note actual salary is based on geographic location, qualifications, and experience.
Additionally, the following benefits are provided by Red Ventures, subject to eligibility requirements.
- Health Insurance Coverage (medical, dental, and vision)
- Life Insurance
- Short and Long-Term Disability Insurance
- Flexible Spending Accounts
- Paid Time Off
- Holiday Pay
- 401(k) with match
- Employee Assistance Program
- Paid Parental Bonding Benefit Program
Who We Are
Over the last twenty years, Red Ventures has built a portfolio of influential brands, digital platforms, and strategic partnerships that work together to connect millions of people with expert advice. Through premium content and personalized digital experiences, Red Ventures builds online journeys that make it easier for people to make important decisions about their homes, health, travel, finances, education and entertainment. Founded in 2000, Red Ventures has 3,000 employees in 10 cities across the US, as well as in the UK and Brazil. Red Ventures owns and operates several large digital brands including Healthline, The Points Guy, Bankrate, MYMOVE, and Allconnect.com.
For more information, visit https://redventures.com and follow @RedVentures on social platforms.
We offer competitive salaries and a comprehensive benefits program for full-time employees, including medical, dental and vision coverage, paid time off, life insurance, disability coverage, employee assistance program, 401(k) plan and a paid parental leave program.
Red Ventures is an equal opportunity employer that does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or any other basis protected by law. Employment at Red Ventures is based solely on a person's merit and qualifications.
We are committed to providing equal employment opportunities to qualified individuals with disabilities. This includes providing reasonable accommodation where appropriate. Should you require a reasonable accommodation to apply or participate in the job application or interview process, please contact accommodation@redventures.com.
If you are based in California, we encourage you to read this important information for California residents linked here.
Click here for more details regarding the employee privacy policy: https://www.redventures.com/legal/us-emp-privacy-notice
Questions about this Privacy Notice can be directed to employeerights@redventures.com. Alternatively, you may raise any questions or concerns to your manager, HR Business Partner, or through the Privacy Team.