Security Engineer II (Cloud Security & GRC)
Upload My Resume
Drop here or click to browse · PDF, DOCX, DOC, RTF, TXT
Requirements
• Skills needed: Designing threat detection solutions for cloud environments, developing security workflows/tools, enforcing access control policies, understanding ISO 27001 standards. • Years of experience: Not explicitly stated; however, the role is described as a senior position (Security Engineer II), which typically requires several years of industry experience. Implied requirement may be around 3+ years based on common job progression in this field. • Education: Bachelor's degree or higher preferred with relevant coursework/experience; not explicitly stated but can be inferred from the seniority level and complexity of tasks involved. • Certifications: Not specifically mentioned, though certifications like AWS Certified Security Solutions Expert (CSXE) for cloud security could enhance qualification based on role responsibilities involving Azure AD among other platforms; not explicitly stated but commonly required in this field. • Must-haves: Experience with GRC tools such as Vanta, knowledge of risk assessments and audits processes including evidence collection (not specifically mentioned).
Responsibilities
• Design, implement, and maintain threat detection, response, and access control solutions for cloud-native environments and applications such as Azure AD, M365, Google Workspace, Salesforce. • Develop and automate security workflows, playbooks, and tools to improve the efficiency and effectiveness of security operations. • Develop, enforce, and update security policies, procedures, and guidelines for access control, threat detection, and compliance with standards such as ISO 27001, SOC 2, PCI, NIST CSF, and Sarbanes-Oxley. • Participate in and oversee risk assessments, compliance reviews, and audits (internal and external), including evidence collection and control implementation. • Maintain and monitor control effectiveness and operations in GRC platforms such as Vanta. • Communicate concerns and risks to stakeholders, document remediation plans, and proactively share information with management. • Conduct third-party risk reviews for SaaS tools, service providers, AI tools, and open-source software; manage the third-party audit pipeline and vendor responses.
Benefits
• Medical, Term & Accidental Insurance • All Purpose Leave (casual & sick time): 12 days • Earned Leave: 15 days • Public Holiday: 12 days • Generous Maternity & Paternity Leave • Quarterly Wellness Day • Work From Home Allowance • See Our High-Performing Culture >>> Check us out on Instagram (@lifeatshipbob) • We recognize that people come with a wealth of experience and talent beyond just the technical requirements of a job. If your experience is close to what you see listed here, please still consider applying. Diversity of experience and skills combined with passion is a key to innovation and excellence; therefore, we encourage people from all backgrounds to apply to our positions. • The work we do at ShipBob is both challenging and rigorous, which means our environment isn’t the right fit for everyone, and that’s okay. We welcome energetic high performers who thrive in a dynamic, collaborative, results-driven environment. We value individuals who embrace accountability and humility, push boundaries, and are motivated by challenging work. Every team member, no matter their role or tenure, is expected to roll up their sleeves and tackle the complex problems we face in today’s global supply chain. • Learn more about our core values and how we perform at a high level in our day-to-day work on our Culture page (https://www.shipbob.com/careers/culture/). • ShipBob is a leading global supply chain and fulfillment technology platform designed for SMB and Mid-Market ecommerce merchants to provide them access to best-in-class capabilities and to deliver a delightful shopper experience. Merchants can outsource their entire fulfillment operations, utilize ShipBob’s proprietary warehouse management system for in-house fulfillment, or take advantage of a hybrid solution across ShipBob’s dozens of fulfillment center network in the United States, Canada, United Kingdom, Europe, and Australia. ShipBob is backed by leading investors like Menlo Ventures, Bain Capital Ventures, Hyde Park Venture Partners, and SoftBank Vision Fund 2, and is one of the fastest-growing tech companies headquartered in Chicago.
Similar Jobs
No credit card. Takes 10 seconds.