Senior Staff Security Engineer - Credit Karma

Security Leader

We are looking for an exceptional security leader to strategize, design, and guide the implementation of our rapidly expanding security capabilities to secure applications and data in multi-/hybrid-cloud environments. With strong technical competency in the areas of cloud infrastructure, application, and data security, you'll lead and partner with an innovative and passionate team of engineers to create and implement effective, cost-efficient, and low-friction security solutions using cutting-edge technologies.

Responsibilities

• Lead strategic initiatives to mitigate and remediate security risk across the organization
• Implement & instrument security controls and tooling across cloud infrastructure to uplevel the security posture
• Work on a cloud native environment leveraging containerized workloads, serverless architecture and automated CICD pipeline to manage infrastructure-as-a-service
• Perform scripting and coding to build security tooling and for automating redundant tasks
• Use terraform to deploy security baseline controls, perform code reviews, and provide recommendations for improved security
• Research and advocate new technologies, architectures, and security products that will support security strategies, patterns, and standards and help address new threat vectors
• Lead applied cryptography function focussed on PKI, key lifecycle management and secrets/vault management in a distributed and multi-tenant environment
• You will be working on at least 2-3 vertical domains within security engineering- applied cryptography, IAM, network security, vulnerability management or detection & response engineering
• Operate in a tier 0 environment with a rigor and discipline to handle rotational on call and incident response
• Define, document and implement security standards, guidelines and procedures for secure operations in a cloud infrastructure environment

Qualifications

• 10+ years of experience in security engineering building, operating and architecting a combination home grown and vendor solutions
• Strong understanding of computer engineering with a focus on security, infrastructure, platform, IAM and application (cloud, containerization, container orchestration, network, application reliability, database architecture)
• Demonstrable knowledge of network architecture, web application security, and experience supporting multi-tier web application architectures
• Experience running infrastructure at scale; utilizing configuration management and automation to ensure idempotency, ephemerality, security, and reliability
• Experience operating tier 0 systems in production which are customer and revenue impacting
• Expertise in at least 2-3 vertical domains within security engineering is a big plus - applied cryptography, IAM, network security, vulnerability management or detection & response engineering
• Professional knowledge of Golang, Java or other higher-level OOP languages
• Professional experience with Kubernetes, Helm, Terraform and CI/CD toolsets
• Familiar with SRE and devsecops methodologies and passionate about solving operation problems by utilizing automation and software
• Ability to communicate effectively vertically and horizontally within the organization via demonstrated written and verbal communication skills