Listing Description

Job Description:
Defend security initiatives throughout the organization by building tools to make secure-by-default easy. Conduct regular security reviews of third-party vendors/partners and answer all questions about the security posture. Ensure that Personally Identifiable Information (PII) of customers and employees are adequately protected, and the secure mechanisms are in place to share this information when needed. Work with auditors and compliance teams to identify risks and prioritize fixes for the identified risks, working to make sure the system is more secure. Work with IT/Engineering teams to ensure administrative rights are not needed on end user workstations for everyday tasks and to ultimately trim down the number of users that have administrative rights. Ensure all endpoints throughout the organization are configured with security settings that align with industry standards and that they have the relevant security tools (MDM, EDR, etc.) installed. Curtail shadow IT by ensuring that only approved software and tools are able to be used. Ensure that SaaS/PaaS tools/products are secured and do not leave data at risk. Create awareness of security risks, best practices, and provide frequent education to the organization. Implement asset discovery/management capabilities to ensure all IT assets are adequately tracked. Participate in the design and implementation of applications, services, and infrastructure to ensure security and privacy design principles are being followed. Participate in all facets of the incident repose lifecycle and enhance incident response playbooks leveraging automation to remediate issues or add context where possible. 

Job Requirements:

1. Bachelor’s degree in Computer Science, Computer Engineering, Telecommunications, Cyber Security, or a closely related field.


2. Three (3) years of experience working on a security team supporting product or engineering functions, cloud infrastructure, and corporate infrastructure development.


3. Other experience and skills must include:
   
   
   
   • Software engineering and scripting experience.
   
   
   • Single Sign-On/SAML solutions including Okta, ADFS, or Auth0.
   
   
   • Security threats, applied cryptography, and risk assessments. 
   
   
   • Working with engineering teams to advance security initiatives. 
   
   
   • Defining and implementing internal practices and controls for PCI and SOX/ ITGC information security compliance standards. 
   
   
   • AWS security and IaC (Infrastructure as Code) using CloudFormation or Terraform. 
   
   
   • Developing playbooks to automate Incident Response process using SIEM and SOAR. 
   
   
   • Security operations log management and threat hunting using Python, Tanium, Crowdstrike, and Splunk. 
   
   
   
   


4. Telecommuting is available for this position. 


5. Must have current authorization to be employed in the U.S. without employer sponsorship. 

Employer: Angi Inc. 

Annual Salary Range: $150,000 - $170,000 

Work location: 3601 Walnut St., #700, Denver, CO 80205 

Apply online at https://boards.greenhouse.io/angi 

#LI-DNI