Infrastructure Security Engineer

San Francisco, CA, United States

About Unit 21:

Unit21 protects businesses against adversaries engaging in money laundering, fraud, and other sophisticated risks by offering a no-code toolset to model, detect, and remediate suspicious activity. We are backed by investments from Google, Tiger Global, ICONIQ, Diane Greene (Google / Google Cloud), Jack Dorsey (Block / Twitter), William Hockey (Plaid), among others.

About the role:

As a Senior Infrastructure Security Engineer in Unit21,  you will bring your technical expertise to develop, own, manage, and improve the application security controls that protect our products, services, and data. This role blends security leadership, engineering and analytical skills. We want you to help design, specify, deploy and operate the solutions that protect our products from attack as well as detect and respond to alerts warning of possible anomalous behavior or vulnerabilities in our systems. You will be responsible for working with product and engineering teams to integrate application security monitoring into their flows and processes, as well as baking security reviews into our product development lifecycle.

Technical Fluency - Significant experience on an internal security team, or building security products.

A passion for security and technology, and familiarity with Python.

Advisory Skills - Giving direction, advice and support that helps grow the technical and collaboration skills of the individuals and teams with which they engage.

Execution - Planning, coordination, managing dependencies and risks, diving deep when issues arise.

What you'll be doing:

Partnering with engineering teams to design, build, select and implement effective security controls to detect and alert on security events

Design, architect, and implement defensive security controls across endpoints (MacOS, Windows), servers (Linux), and SAAS/self-hosted applications.

Provide security domain expertise on protective controls, to include system, network, encryption, and authentication services.

Collaborate with engineering teams to improve security for identity access and management (IAM), device management, and public cloud service providers (e.g. Amazon AWS, Google GCP, Microsoft Azure).

Identifying gaps in coverage of the Unit21 security controls and working across teams to specify and deploy improvements that address these gaps.

Managing the external firms that conduct security and privacy related compliance assessments (SOC 2, GDPR, CCPA) on our company.

Writing code where needed to deploy new security, privacy, and access control capabilities.

Providing security subject matter expertise and training to teams across the company.

What we're looking for:

4 year of experience as DevSecOps or infrastructure security engineer

Experience with public cloud service providers (e.g. Amazon AWS, Google GCP, Microsoft Azure).

Experience with Infrastructure as Code (IaC) like Terraform or CloudFormation.

Experience with CSPM tools like Lacework or Wiz.

Experience creating, implementing, and managing technical information security controls including developing security incident response processes and teams.

Demonstrated history of successful cross-organizational efforts.

Ability to drive large, complex programs and solutions using both direct and virtual teams

Compensation:

The standard base pay range for this role is $155,00.00 - $175,000.00 Annually. This base pay range does not include variable compensation including potential commissions, bonuses or other financial or equity incentives.

#BI-Remote

Unit21 is an equal opportunity employer, we encourage all to apply, even if you do not meet each requirement above. We are building a diverse, inclusive workforce and hope you will join us!

What we can offer you:

Competitive salary and pre-IPO stock options

100% company-paid medical, dental and vision insurance (for employee)

Optional HSA and FSA medical reimbursement accounts

Unlimited paid time off

Generous leave programs for life events

401(k)

Charity matching

Annual Learning & Development stipend

One-time Home office set-up stipend

Commuter benefits

Happy hours and team-building events

Great office space in the San Francisco Financial District

Fully stocked kitchen

Lunch and dinner provided in SF office at least 3x per week

A great company culture with a strong emphasis on diversity, equity and inclusion

About Unit21

Unit21 stops bad actors by leveraging data to deliver justice and safety in the world. We protect businesses against adversaries engaging in money laundering, fraud, and other sophisticated risks by offering no-code infrastructure to model, detect, and remediate suspicious activity. Our customers range from large Fortune 500 companies to high-potential, pre-launch startups. We have reported over USD $2 billion in fraud and laundered money to the US government using our software.

We are a rapidly growing Series C startup, having raised close to $100m from Google, Tiger Global, ICONIQ Capital, Jack Dorsey, Diane Greene, and other leading VCs. Our team believes deeply in fostering individual ownership, iterative product development, and empathetic communication. There are many challenging problems to solve in this industry, and a huge opportunity for our software to empower companies to define a new standard of eliminating bad behavior on their platforms.

We encourage people of all backgrounds to apply. Unit21 is committed to creating an inclusive culture, and we celebrate diversity of all kinds.

*Remote work limited to the following states: Arizona, California, Colorado, Georgia, Idaho, Illinois, Kansas, Maryland, Massachusetts, New Hampshire, New Jersey, New York. North Carolina,Ohio, Oregon, Pennsylvania, Rhode Island,South Carolina, Texas, Utah, Virginia, Washington.*