Security Engineer - Cover Genius Malaga Bookmark Share Print 242 0 0

Listing Description

The Company  

Cover Genius is a Series C global Insurtech with a vision to protect all the customers of the world’s largest digital companies. Partners such as Booking.com , eBay, Shopee, Ola, Wayfair and AXS have integrated XCover, our insurance distribution platform that embeds protection for millions of worldwide customers each year.
 
Our team and products have been recognised with dozens of awards including by the Financial Times who ranked Cover Genius as the #1 fastest growing company in APAC in 2020. Our diverse team across 10 countries and many language groups commits itself to diverse cultural programs, in particular “CG Gives” which makes social entrepreneurs out of us all and funds development initiatives in global communities. 

Our People are Bold, Authentic, Purposeful and Inspired  

Our People are not Perfect, Traditional, Complacent or Cautious  

 
About the role:

The primary responsibility of a Security Engineer is to maintain and improve the security of the organization's data and systems. In addition, members of the Security team work to ensure the organization remains compliant with applicable security compliance frameworks. A Security Engineer is expected to work across a wide range of technical functions to improve platform and corporate security.

Security Engineers are expected to work independently to improve application and platform security. They will collaborate with other teams within the organization to carry out regular testing & provide platform security improvements.

Your day-to-day will involve:
  • Detect, investigate, and respond to any security incidents (including on-call activities as security team).
  • Plan, develop, implement and update the company's information security strategy.
  • Analyzing and documenting any infosec risks and developing appropriate mitigation strategies.
  • Develop, procure and deliver documentation, training and other support to all CoverGenius employees regarding. security & compliance responsibilities and best practices.
  • Develop & procure tooling and automation to support any of the functions of the security team.

    • What the ideal profile looks like
  • Write Risk Management Framework (RMF)-based policies and procedures, and develop comprehensive cyber security processes to contain implementation.
  • Assessing cloud infrastructure against security best practices and compliance requirements.
  • Remediating and/or coordinating with appropriate teams to ensure strategies are in place to mitigate cloud infrastructure security issues. 
  • Assisting other engineering teams to implement a shift left security culture e.g. pipeline SAST/DAST.
  • Providing advice, tooling and training to allow engineering teams to secure their web applications.
  • Creating and rolling out MDM policies to corporate devices and ensuring corporate devices are compliant with security policies.
  • Provision, deprovision and track employee hardware. Or where appropriate that any BYO hardware is used in a sufficiently controlled fashion in compliance with infosec policies.
  • Partake in technical design reviews, integration, testing, and documentation work.
  • Providing information to current and prospective customers/partners regarding security.
  • Conducting risk assessments for current and potential Cover Genius vendors .
  • Assisting employees with corporate policy compliance.
  • Coordinating and conducting regular access reviews.
  • Creating security awareness training for employees.
  • Assisting the organization in increasing Phishing awareness by creating phishing campaigns.
  • Assisting the organization in meeting compliance framework requirements (e.g SOC2).
  • Co-ordinating scheduled external security testing (e.g. annual penetration testing).
    • Why Cover Genius?  

    Cover Genius not only cares about being the best in our industry, we care about our team. We’re a business that understands life can be fluid and so we flex to ensure we provide the environment to suit that. What does that mean?  

    • Flexible Work Environment - we are outcome focussed and understand that for our people to perform at their best flexibility is critical. Soon after the declaration of the COVID-19 global pandemic the entire CG team was granted an extra 15 days of Wellness Leave to take throughout 2020. 
     
    • Employee Stock Options - we want our people to share in our success, we reward them with ownership for their contribution in creating a world-class company.

    • Work with like-minded people who are passionate about both the work we're doing and giving back. Our CG Gives programs enables us to all become philanthropists through our peer recognition and rewards system.
     
    • Social Initiatives - pictures speak a thousand words!


    Sound interesting? If you think you have the best composition of the above, send us your resume and let's chat!

     * The health and safety of our people, family and communities is our number one priority. This means that we require all of our employees to be fully vaccinated against COVID-19 if they are not subject to an applicable legal exemption; therefore all offers will be subject to proof of vaccination or an attestation of exemption. Please speak to us if you have any questions regarding our reasonable accommodations process based on your individual circumstances.

    Listing Details

    • Citizenship: Not Provided
    • Incentives: Not Provided

     

    • Education: Not Provided
    • Travel: Not Provided
    • Telework: Not Provided

    About Us

    NinjaJobs is a community-run job platform developed by information security professionals. Our unique approach of focusing strictly on cybersecurity positions allows us to personalize the user experience.

    Useful Links

    Our Contacts

    1765 Greensboro Station Pl.
    Suite 900
    Tysons Corner Va 22102

    (703) 594-7765

    requests@ninjajobs.org
    www.ninjajobs.org
    Chat with us!