Meltwater

About the role

Meltwater’s collaborative Security Team needs a passionate Security Engineer to continue to advance Meltwater’s security. Working with a group of fun loving people who are genuinely excited and passionate about security, there will be more laughs than facepalms! If you believe that improving security is about constantly moving technology forward to be more secure, and shifting security tools and checks earlier in the development lifecycle, then you’ll feel at home on Meltwater’s Security Team! 

At Meltwater we want to ensure that we can have autonomous, empowered and highly efficient teams. Our Security Team charges head on into the challenge of ensuring our teams can maintain their autonomy without compromising the security of our systems, services and data. Through enablement and collaboration with teams, Security Engineers ensure that our development and infrastructure practices have security defined, integrated and implemented in a common-sense manner that reduces risk for our business. Security Engineers define best practices, build tools, implement security checks and controls together with the broader Engineering and IT teams to ensure that our employees and our customers' data stays safe. 

As part of this, we leverage AWS as a key component of our cloud infrastructure. Security Engineers play a critical role in securing and optimizing AWS environments by implementing best practices, automating security controls, and collaborating with teams to ensure scalability, resilience, and compliance with industry standards. 

Responsibilities 

• In this role, you will be designing and implementing security functions ranging from checks on IaC (Infrastructure as Code) to SAST/DAST scanners in our CI/CD pipelines.
• You will be collaborating closely with almost every part of the Meltwater organization and help create security impact across all teams with strong support from the business. 
• Collaborate closely with teams to help identify and implement frictionless security controls throughout the software development lifecycle 
• Propose and implement solutions to enhance the overall cloud infrastructure and toolset.
• Perform ongoing security testing, including static (SAST), dynamic (DAST), and penetration testing, along with code reviews, vulnerability assessments, and regular security audits to identify risks, improve security, and develop mitigation strategies. 
• Educate and share knowledge around secure coding practices 
• Identify applicable industry best practices and consult with development teams on methods to continuously improve the risk posture. 
• Build applications that improve our security posture and monitoring/alerting capabilities
• Implement and manage security technologies including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and security information and event management (SIEM) tools.
• Conduct vulnerability assessments, penetration testing, and regular security audits to identify risks and develop mitigation strategies. 
• Monitor and respond to security incidents and alerts, performing root cause analysis and incident handling.
• Participate in incident response and disaster recovery planning, testing, and documentation.
• Manage identity and access management (IAM) solutions to enforce least privilege and role-based access controls (RBAC). 
• Assist in the development of automated security workflows using scripting (Python, Bash, or similar).

Skills and background 

• Strong collaboration skills with experience working cross functionally with a diverse group of stakeholders
• Strong communication skills with the ability to provide technical guidance to both technical and non-technical audiences 
• Experience in implementing security controls early in the software development life cycle
• Knowledge of industry accepted security best practices/standards/policies such as NIST, OWASP, CIS, MITRE&ATT@CK 
• Software developer experience in one or more of the following languages: JavaScript, Java, Kotlin or Python
• Experience in at least one public cloud provider, preferably AWS, with experience in security, infrastructure, and automation. 
• Hands-on experience with SIEM platforms such as Splunk, QRadar, or similar. 
• Proficiency in Linux operating system, network security, including firewalls, VPNs, IDS/IPS, and monitoring tools. 
• Experience with vulnerability management tools (Snyk, Nessus, Dependabot) and penetration testing tools (Kali Linux, Metasploit). 
• Experience in forensics and malware analysis. 
• Self motivated learner that continuously wants to share knowledge to improve others 
• The ideal candidate is someone from a Software Development background with a passion for security.

If you’re someone who understands the value of introducing security early in the software development lifecycle, and want to do so by enabling and empowering teams by building tools they WANT to use, we want to hear from you!