About Firstbase
Remote work is the biggest workplace revolution in history. Nothing will deliver a higher quality of life upgrade in the next decade. The biggest challenge is in providing the core infrastructure that makes going remote easy for companies. Firstbase helps companies setup, manage, maintain and retrieve all the physical equipment remote workers need to do great work at home.
We're a small and fully distributed team, currently spanning from the US to Belgium and we take pride in our ability to function as an effective remote-first organization. We offer market-rate salaries (including equity), a home office (via Firstbase), insurance, as many books as you could ever hope to read, and a tight-knit group of people passionate about creating for the future of work.
About This Position
We are seeking an experienced IT Security Engineer to join our team. The ideal candidate will have a solid background in infrastructure security, application security, endpoint security, and role-based access control.
Your Responsibilities will include, but are not limited to:
Corporate IT Security
- Contribute to the development and maintenance of security policies, procedures, and standards for all company IT systems
- Conduct security risk assessments and implement mitigation strategies
- Monitor and respond to security incidents, including investigation, escalation, and resolution
- Maintain awareness of emerging security threats and trends, and ensure that appropriate measures are taken to mitigate risk
- Conduct regular security audits and vulnerability assessments
- Work with the Technology Operations Manager to achieve and maintain compliance standards, including but not limited to: SOC2 Type 2, GDPR, HIPAA, ISO27001
- Complete customer security questionnaires
Application Security
- Conduct security risk assessments and implement mitigation strategies
- Evaluate and select security tools and technologies to meet the needs of the organization
- Design, implement, and maintain role-based access control systems
- Organize secure development training
- Develop and implement secure coding practices and standards
- Collaborate with DevOps to ensure that security is integrated into all aspects of system development and deployment
Role Requirements:
- Bachelor's degree in Computer Science, Cybersecurity, or related field
- At least 5 years of experience in IT security, with a focus on infrastructure security, application security, endpoint security, and role-based access control
- Strong understanding of security principles, standards, and best practices
- Experience with security tools and technologies, including firewalls, intrusion detection/prevention systems, antivirus software, and vulnerability scanners
- Familiarity with cloud security concepts and best practices, especially for in AWS
- Experience with secure coding practices and standards
- Excellent communication and interpersonal skills
- Ability to work independently and as part of a team
- Experience in a fast-paced startup environment is a plus
- Relevant certifications, such as CISSP, CISM, or GIAC, are a plus but not mandatory
We’re committed to building a culturally diverse team and strongly encourage you to apply regardless of your location, background, race, gender, sexual orientation or any other personally defining attribute. We encourage every person who is interested to apply. We’re imperfect communicators, so think of our job postings as the starting point for discussion rather than proof that you shouldn’t apply. Take the leap - you never know, you might just be the perfect person for one of our open roles, even if you don’t match 100% of the job description.
