About Care.com

Care.com is a consumer tech company with heart. We’re on a mission to solve a human challenge we all face: finding great care for the ones we love. We’re moms and dads and pet parents. We have parents and grandparents, so we understand that everyone, at some point in their lives, could use a helping hand. Our culture and our products reflect that.

Here, entrepreneurs, self-starters, great teammates, and big problem solvers unite behind a common cause. Here, we’re applying data analytics, AI and the latest technologies to solve universal problems and connect people in new ways. If you enjoy solving big problems and building new things, and if you’re all about using your talent for good, this is the place for you.

Overview

The Information Security team is responsible for overseeing the implementation of technical security controls across the organization to ensure our customer data, systems, and employees are secure and in compliance with industry best practices and applicable regulations. The Senior Information Security Engineer will perform critical work in the areas of application security, infrastructure security, and security operations. Working closely with development, IT, and compliance teams, this role offers a unique opportunity to work hands-on with a wide variety of people and technologies.

Responsibilities:

• Assist in the development and execution of security projects
• Lead security product selection & implementation
• Develop operational security procedures
• Conduct and track security testing efforts
• Monitor threat landscape for emerging threats; communicate threat information to the business and help guide mitigation or remediation
• Participate in security response efforts that may include on-call rotation

Requirements and Skills:

• Security:
  • Expert knowledge of the following security tools and technologies:
    • Application Security Testing (Veracode, Black Duck, Burp, Nikto, Zap, etc.)
    • Vulnerability Assessment (Rapid7, Qualys, Nessus, Retina CS, etc.)
    • Web Application Firewalls (AWS WAF, F5 ASM, Akamai WAF, CloudFlare WAF, etc.)
    • SIEM (Arcsight, QRadar, Splunk, ELK/Kibana, etc.)
    • Endpoint Security (CarbonBlack, Crowdstrike Falcon, Palo Alto Traps, Cylance, etc.)
  • Knowledge of web application security concepts (OWASP Top 10, HTTPS/TLS, CVSS/CVE)
  • Knowledge of static and dynamic code analysis techniques and implementations
  • Knowledge of security integrations to CI/CD pipelines and software development lifecycles
  • Knowledge of cloud technologies (AWS, Azure, GCP, etc.)
  • Knowledge of OS Security (Linux, Windows, and Mac)
  • Understanding of compliance (SOC 2, ISO27001, SOX, PCI) and its influence on security technologies
  • Software development or scripting knowledge (Python, Java, Go, etc)
• Professional:
  • Excellent organizational, time management, and communication skills
  • Ability to tactfully communicate and achieve results across team boundaries
  • Ability to convey a strong presence and professional image
  • Ability to work confidently in a highly complex technical environment
  • Ability to resolve ambiguity and take decisive action
• Experience:
  • 5+ years IT Security experience
  • Bachelor degree in Computer Science/Engineering or equivalent work experience
  • CISSP, CCSP, SSCP or other security certifications (GIAC, etc) are preferred