The role:
As a Security Engineer at Status, you will work closely with everything and everyone to ensure best practices are being upheld
Sometimes, you will define those best practices
You will often have the opportunity to research, develop, and evaluate bleeding edge tech for the purpose of strengthening the security and privacy stance of our products and organization
In some ways, it is your job to make your job as obsolete as possible
You will touch on a broad array of challenges and topics that fall under the scope of Security, so you must be able to continuously adapt and learn
Depending on your experience, you might get to work on the following:
Operational Security:
- Security best practices education
- Managing bug bounty programs
- Delivering and developing security awareness training
- Overseeing security monitoring activities
Security Procedures:
- Defining, implementing and updating security policies
- Reporting breaches to the Security Compliance function
Secure SDLC:
- Defining, deploying (CI/CD integration) and updating secure Software Development Life Cycle (SDLC)
You ideally will have:
[Don’t worry if you don’t meet all of these criteria, we’d still love to hear from you anyway if you think you’d be a great fit for this role!]
- Experience in, and passion for, blockchain technology
- Threat modeling and risk assessment
- Security auditing and reverse engineering
- A strong alignment to our principles:
- “Blue team” experience: security monitoring ( SOC)
- Experience in managing large bug bounty programs (e
g HackerOne, Bugcrowd, etc
)
- Information security management framework expertise ( ISO 2700x)
- Information security policies experience (design and deployment)
- Experience in managing large open source projects (with external contributors)
- SDLC experience (design, implementation and compliance)
Bonus points if you have:
- Experience working remotely and asynchronously
- Experience working for an open source organization
Hiring process
The hiring process for this role will be:
- First chat with one of our People Ops team
- Corey, the Chief Security Officer of Status
im - Interview with one of our internal team leads – this will depend on what area of specialisation we’ll see you’re most fit to work in
The steps may change along the way if we see it makes sense to adapt the interview stages, so please consider the above as a guideline
We’re looking for the new Security Engineer (you?) to join the team as soon as possible, and we’re hoping to close the hiring process ideally by the end of Q1 2021