Ocrolus is a fast-growing financial technology organization with many emerging security threats and we are building a world-class security program to keep Ocrolus and our customer’s data secure.  We are looking for a diverse set of security practitioners to help us design, build, and scale security at Ocrolus.  We value critical thinking, creativity, data-driven and intelligence-driven approaches, and offensive experience.  We believe security is a collaborative and open process, where security is a partner to help achieve business goals securely.  We believe in saying “yes, and” instead of “no” when recommending security objectives.  We don’t believe in using fear or penalty for enforcement of security policies and processes, and we will always provide evidence and justification for security controls.

Responsibilities

• Conduct security testing of a wide variety of critical applications and enterprise systems.


• Perform manual product security testing and source code auditing.


• Give clear and detailed risk assessment and remediation guidelines for engineers and business owners.


• Report underlying security issues and propose enhanced security protections.


• Writing and disseminating security guidelines for common security issues, remediation guidance, and security technology baselines.


• Build relationships with stakeholders throughout the engineering and product organizations.


• Help build a collaborative and enlightening world-class security team at Ocrolus.


• Spread security culture throughout the organization.

Requirements

• Experience using and implementing a wide variety of security tools and technologies spanning product security, enterprise security, and security operations.


• Experience discovering security vulnerabilities and performing a variety of penetration testing.


• Experience designing and building a wide variety of technical security controls and solutions.


• Experience developing software for security purposes.


• Ability to explain basic security, engineering, networking, and cloud concepts.


• Great communication, prioritization, and project management skills.