Timescale
Timescale está com vaga(s) de emprego para Director Of Engineering Security – Rio De Janeiro em Rio de Janeiro / RJ
Cargo:
Director of Engineering Security – Rio de Janeiro
Requisitos:
**Engineering**:
Timescale is building the world's next great database company on top of industry-standard PostgreSQL and we need your help! We are hiring a Security Director to build and manage our security policy and implementation for Timescale Cloud and TimescaleDB.
If you have a passion for building secure software in a dynamic, fast-paced, growth-minded startup environment, this might be the right role for you. We are growing a global, fully distributed team that recruits, develops and promotes people with diverse backgrounds, experiences and views. We believe when people are included and feel appreciated, it creates a culture where people can do meaningful and impactful work. This inspires fearless ideas, innovation and amazing outcomes.
**What you'll do**:
As the Director of Security, you will lead the efforts to build more secure software that ensures the protection of our customers' systems and data. You will write and manage security policy, however we also expect you to be a player/coach, working directly with our teams to understand our security profile and to engineer more secure systems in line with industry best practices. You will lead the SOC2 and GDPR compliance processes and speak with any customers, partners and stakeholders about their security concerns.
**Responsibilities**:
- Work with stakeholders to write an operational and engineering security policy that aligns with company needs and industry best practices and ensures the highest possible security for our customers and their data
- Work with engineering leaders and teams to implement security policy across the company
- Continually assess the policy to ensure it matches the current company strategy and aligns with our customers' needs
- Create a highly efficient operating model that balances security operations with product delivery and customer commitments
- Hire engineers with a specialty in security as needed
- Working with partners on vulnerability assessment and mitigation
- Run a bug bounty program
- Recommend and implement systems and tools that increase the security profile of Timescale
- Champion and educate the organization about the latest security strategies, technologies and methods
- Lead compliance program certifications such as ISO 27001, SOC2 and GDPR
- Work with teams to help increase their knowledge of secure development practices
- Develop systems to review existing and new code bases for problematic patterns
- Lead process around CVE mitigation
- Maintain a security risk register and assist with internal and external audits relating to information security
- Assist with security training for engineers and other technical stakeholders
- Lead security incident investigations
**Requirements**:
- A passion for technology and security safeguarding with a desire to deliver
- Demonstrated ability to build a security function in a fast-paced, growth-focused startup environment
- Experience working with the AWS security model
- Strong customer focus - ability to meet the demands of internal and external customers
- Strong experience implementing security compliance projects including ISO 27001, SOC2 and GDPR
- Deep knowledge of vulnerability assessment, threat modeling and systems security
- Ability to work with product engineering teams to prioritize and implement security issues
- Excellent oral and written communication skills
- Capable player/coach. You don't just write policy, you help implement it
**Preferred**:
- Experience working in a fully-remote environment
- Experience with DBaaS, PostgreSQL, and cloud-native engineering
Timescale has an amazing culture built on strong values. We have learner mindsets and think like owners. We're kind to each other, and support one another. We achieve together. We are colleagues, here to do the best work of our lives.
Timescale is a fully remote company, and this is a remote job. We're hiring from anywhere that makes sense for working with teams across multiple global time zones.
**Benefits & Compensation**:
We offer globally competitive salaries. Our benefits support our people and their families and we strive to provide premium benefits such as flexible time off and resources you need to support you in doing the best work of your career.
**How to Apply**:
Introduce yourself to us as a colleague and share some recent work that you're especially proud of. Tell us why you want this job and why you'd like to work at Timescale. We value good writers, so be yourself, be creative, and have fun.
If you've participated in open source, dev ops, PostgreSQL, please include links to pull requests, bug reports, feature pitches, or any other public engagement. Open-source participation is by no means a requirement, but if it's something you've done, we'd love to look at it!
**What Happens Next?**:
Salário:
A combinar
Benefícios:
Não foi informado