Manage a team of Application Security and Cloud Security engineers, focusing on professional development, positive morale, and continuing momentumEnsure the confidentiality, integrity, and availability of Alloy’s systems and data while allowing the business to move forward at a rapid paceManage the product security backlog, prioritizing and delegating projects and ensuring their timely deliveryEngage with clients, auditors, and others during a variety of security assessmentsEnsure timely security reviews of new and ongoing engineering initiativesManage security vendor relationshipsParticipate in third party security assessmentsConduct recurring security management meetings (access control reviews, security bug bashes, incident response plan reviews, etc)Participate in risk assessments; lead threat modeling and tabletop security exercisesManage Alloy’s vulnerability management programEnsure vigilance and monitor ongoing security threatsAnalyze and respond to security incidents triggered by automated alerts, bug bounties, or external assessmentsMaintain awareness and understanding of Current Vulnerabilities & Exposures relevant to Alloy applications, dependencies, and infrastructureMake sure vulnerable applications or systems are being promptly updated and vulnerabilities remediatedRegularly assess the security of our systems and compile reports for our team and our customersPerform periodic security audits, penetration tests, and various tasks to ensure security policy and regulatory compliancePrepare reports that document security incidents and the extent of the damage caused by the incidentsMaintain and adapt Alloy's security processes, procedures, and policies (we have strict security requirements and need to provide a lot of documentation to our customers and auditors!)

Effectively leads and oversees a team of highly skilled security engineers across multiple office locations, including remote. Demonstrates an unwavering commitment to fostering a diverse, equitable, and inclusive work environment while assuming responsibility for hiring and developing top talent.Coaches and advocates for the team to support their career growth by prioritizing weekly team syncs, consistent 1:1s, individual development planning, and performance reviews.Leads team in setting clear targets and objectives. Establishes KPIs for the team.Responds to Security incidents with Product/Engineering teams and other ecosystem partners Develops services that seamlessly integrate with Mailchimp’s product launch process, utilizing key metrics and data-driven approaches to enhance security and enable the efficient implementation of "push left" methodologies.Effectively manages relationships with cross-functional teams, facilitating negotiations around requirements, roles, prioritization, and resource allocation across multiple workstreams.Works with the wider Intuit ecosystem to help strengthen security standards/frameworks and toolingCollaborates with senior management to ensure the continual enhancement of our security posture, while aligning the team's strategy with organizational goals. Provides strategic direction, project management, and coordination across multiple teams, promoting effective communication, enhanced comprehension, and process enhancements.Drives the evolution of our security capabilities towards proactive, continuous and ongoing risk assessments for our products. Lowering the risk of security breaches through high quality assessments and successful remediation of security vulnerabilities.Oversees and matures the day-to-day operations of the team, security tools, frameworks, and processes to ensure they are continuously improved based on customer feedback and partnership with engineers

Acts as point of contact for all Product Security responsibilities and functionsProposes, designs, plans and executes strategic and tactical security objectivesDrives program execution alignment across business units to meet the Product Security team goals by executing and being involved in and accountable for organizational transformation.Defines strategy, engineers solutions, and manages roadmap for Product SecurityDevelops, builds and implements a mature and robust set of metrics and reports for Product Security.Leads SCRUM ceremoniesWorks with minimal supervision as part of a team to consistently deliver ground-breaking and innovative solutions.Works closely with stakeholders across the organization to integrate Information Security needs with business needs.All duties listed in Senior Security Engineer II

Enables autonomy for engineers via safe-by-default tooling, and ensures engineering velocity is maintained by automating security requirements and building security as codeDesigns, builds, and automates the security hardening mechanisms to keep the Compass product and its customers safeConducts regular security architecture reviews, vulnerability assessments, and code reviews for the Identifies security design gaps in existing and proposed architectures and recommends changes or enhancementsCompass platform to proactively find potential vulnerabilitiesIs a partner to teams while evaluating and providing security guidance on new product features, processes, tooling, and servicesDrives telemetry and vulnerability taxonomy across the Product and Engineering Platform

Drive awareness and education around secure coding practicesPerform security code reviews including secure library assessmentAudit and tune threat modelsWrite tests to ensure secure properties of an applicationsDesign, develop, and validate remediations for security issuesLead security tooling adoptionDesign and develop secure applications including cryptography, authentication, identity management, secret storage, and PKI

Operations related responsibilities include:Manage Operations TeamConduct employee reviewsResponsible for Performance and EfficiencyResponsible for Profit/Loss (personnel, hosting costs, IT, etc.)Approve Budget and expensesAccountable for Operations initiativesSecurity related responsibilities include:GovernanceRisk AnalysisComplianceEducation and TrainingDigital ForensicsIncident ResponseOffice, cross-company and client securityAccountable for Security initiatives

Performs Security Code audits and design reviews.Performs penetration testing and threat modeling.Develops technical solutions to help mitigate security vulnerabilities.Advocates security and secure code practices throughout organization.Conducts research to identify new attack vectors against company's products and services.Supports PCI DSS compliance.

Provided excellent customer service by preserving high standard of professional communication over the phone, through email and in personDiagnosed and resolved issues with computers, printers, network and VOIP in a Windows environmentTrained employees on using software, e.g. Salesforce, Google Apps, SlackIdentified and removed malware from networkTaught math to students of all skill levels (Kindergarten-Calculus)Provided administrative supportMaintained and updated database of clients

Researched, analyzed and troubleshot Windows OS, networking issues and softwareInstalled all hardware and softwareDiagnosed and resolved hardware and network issuesTrained employees on using software, e.g. Salesforce, Google Apps, QuickbooksSupported mobile device software including Android, iOSCreated and implemented policies, standards and procedures for business practices and IT infrastructureTaught math to students of all skill levels (Kindergarten-Calculus)