Information Security Engineer

Related keywords: recruiter remote jobdata engineer remote jobsalesforce remote job

This page contains product affiliate links.

Overview of SwingDev

SwingDev, also referred to as a hippo company, is the Polish branch of a rapidly growing InsurTech product company called Hippo Insurance. The firm dedicates itself to revolutionizing home insurance by utilizing technology to deliver innovative solutions and create digital products that meaningfully support customers. SwingDev emphasizes the importance of hiring top-notch developers, designers, project managers, and quality assurance professionals by looking for candidates who align with their culture – one that values tech experience, human approach, and what they call culture fit.

Company Culture

The ethos at SwingDev revolves around the belief that "people are at the heart of everything we do." They promote a friendly and enjoyable work environment, even when managing extensive projects. Their success is attributed to two main components: a mature team where members support and inspire one another, fostering a culture of trust, empathy, and positivity. The company prides itself on engaging employees not just as workers but as friends who enjoy collaborating while working towards mutual goals.

Company Mission

The aim of SwingDev is to provide homeowners with intuitive and proactive protection, merging technology with a human touch. They are committed to building the first home protection platform that genuinely serves the needs of modern homeowners. The company strives for innovation that helps prevent costly issues, thereby creating a claims experience that ideally should not be needed.

Role Description: Information Security Engineer

SwingDev is on the lookout for a talented and experienced (Mid/Senior level) Information Security Engineer to form a crucial part of their security team at Hippo. This position involves designing, implementing, and maintaining the security infrastructure of the company, which encompasses endpoint protection and SaaS security solutions. A significant aspect of the role is a solid understanding of security principles and the competency to communicate risks and technical concepts effectively to both technical and non-technical stakeholders.

Key Responsibilities

The role comes with a set of essential responsibilities, including:

• Promoting best practices in information security across various company portfolios.
• Designing and deploying security measures to manage compliance with important frameworks like SOX, NYDFS, and SOC 2.
• Monitoring and bolstering the security posture of SaaS applications, ensuring systems are secure and vulnerabilities are identified and addressed appropriately.
• Engaging in incident response activities to swiftly address security incidents across all company platforms – infrastructure, cloud, applications, and endpoints.
• Developing, maintaining, and enforcing security policies specific to the SaaS and endpoint environments.
• Collaborating with the IT department and key stakeholders to ensure timely patching and adherence to risk mitigation practices and compliance.

Required Skills

To be a successful candidate for the Information Security Engineer role, applicants need to possess the following qualifications:

• Over five years of experience in SaaS or IT administration, complemented by a robust operational background.
• A minimum of two years of hands-on experience specifically in the information security or cybersecurity domain.
• Possession of or progress towards a relevant security certification such as CC, CCSP, SSCP, CISSP, CISM, GSEC, CSX-P, GX-CS, or CompTIA Security+.
• Strong expertise in Identity and Access Management (IAM) systems, authentication protocols, and access control mechanisms.
• Prior exposure to well-known SaaS platforms like Salesforce, Office 365, and Google Workspace.
• Comprehensive knowledge of core security technologies inclusive of SIEM, IDS/IPS, EDR, and firewalls.
• Familiarity with cloud and data security tools, particularly Data Security Posture Management (DSPM) and SaaS Security Posture Management (SSPM).
• Competency in managing endpoint security solutions across multiple platforms, particularly Windows and macOS.

Language and Flexibility

The role requires candidates to be proficient in English and Polish, both in written and spoken forms. Potential hires should also be flexible enough to occasionally participate in meetings during late afternoons or evenings to accommodate multinational team collaboration across various time zones.

Preferred Qualifications

Extra points in the hiring process will be awarded for candidates with experience in security monitoring and automation, knowledge of cloud security architecture, and proficiency in scripting languages like Python, PowerShell, or Bash. Familiarity with compliance and regulatory standards such as ISO 27001, NIST frameworks, and SOC reporting would also be highly regarded.

Recruitment Process

The recruitment process consists of several steps designed to get to know potential candidates better:

1. Submission of CV for initial review.
2. An introductory meeting with a company recruiter.
3. A technical interview focusing on the candidate's technical skills.
4. A final interview to meet team leaders and discuss team dynamics.
5. Successful candidates will receive congratulations and a welcome aboard.

Salary and Benefits

The offered salary for the position of Information Security Engineer ranges between 24,000 – 30,000 PLN plus VAT on a B2B arrangement or equal to the salary on a standard contract of employment. The work environment is remote with flexible hours, promoting a healthy work-life balance.

Additional Benefits include:

• Paid sick leave and holidays.
• Private medical care extended to family members and comprehensive insurance coverage.
• Access to psychotherapists and health programs (e.g., home physiotherapy, Multisport card).
• Financial reimbursement for personal development courses, certifications, and language lessons.
• A variety of perks including cafeteria support, nanny services, and personal concierge assistance.
• Engaging work culture including team-building events and access to office amenities such as free snacks and leisure activities.

Conclusion

This role at SwingDev offers a fantastic opportunity for seasoned security professionals looking to make an impact in a democratic, forward-thinking environment. Those eager to expand their careers in the security domain are encouraged to apply.

This job offer was originally published on himalayas.app