Security Engineer

About this job As a Security Engineer you will form part of JUMO ’s dedicated Security Team. Our mission is to raise JUMO 's overall security posture, by identifying security issues and helping teams to understand and address them.

JUMO ’s tech stack runs in AWS and includes AWS EKS, Terraform, microservices written in Kotlin, Datadog and CI/CD based on Github Actions and ArgoCD.

As a Security Engineer you will need to be familiar with these systems, as well as specific security tooling such as various AWS-based security tools (Security Hub, GuardDuty, AWS WAF, etc), Okta, Semgrep, CrowdStrike EDR, Mimecast, FleetDM and more. You will report into the Head of Security.

You will Help to discover and triage vulnerabilities from various sources. Design, configure, deploy, and maintain secure configurations across JUMO ’s cloud and endpoint estate. Work with engineering teams to complete threat modeling exercises.

Work with teams across JUMO to improve the SDLC and help secure the systems they are responsible for. Write code to automate tasks and integrate it with other products and integrations. Implement and improve security observability. Respond to, document and automate incident responses.

Help secure JUMO ’s use of AI tooling. Proactively seek ways to improve existing processes and systems related to incidents, vulnerabilities, security control systems, and risks. Coach, mentor, and share knowledge within the team. You will need 3+ years of information security experience.

Experience in a security implementation and operations environment. Good foundational programming experience, in a modern language such as Python, as well as Infrastructure-as-Code (Terraform). Experience with cloud services such as cloud providers, SSO, cloud email gateways, cloud productivity suites.

Ability to build relationships and work effectively with other teams. Ability to effectively prioritize tasks and take initiative. A keen eye to identify process constraints and find solutions to a