Work In Tech

About you and the role

We believe security to be a core part of the organization and its culture. That means allowing external understanding and visibility into the security needs of the organization. Security and Trust are core pillars of PartnerStack’s product features and a competitive advantage. Our goal is to continuously improve our security posture and be a leader in our industry.

As a Staff Security Engineer, you will be crucial in ensuring the security and integrity of our partnership ecosystem. You will be responsible for implementing and maintaining security measures, conducting risk assessments, investigating security incidents, and providing guidance and expertise to the security team. This is a hands-on technical role, and you’ll work directly with our application, network, and infrastructure codebases.

What you’ll do

• Develop and maintain security architecture and design principles
• Collaborate with cross-functional teams to ensure security requirements are incorporated into system and network designs
• Review and evaluate proposed system changes or new technologies for potential security risks
• Monitor, analyze, and respond to security events and incidents
• Conduct vulnerability assessments and penetration testing to identify and address potential vulnerabilities
• Implement, maintain, and improve security controls, including firewalls, intrusion detection systems, and data loss prevention tools
• Configure and manage security systems and tools
• Lead incident response efforts, including containment, eradication, and recovery
• Conduct forensic investigations to determine the root cause of security incidents
• Document and communicate incident findings and recommendations to stakeholders
• Develop and maintain incident response plans and playbooks
• Develop and deliver security awareness and training programs for employees
• Stay up to date with the latest security threats, vulnerabilities, and industry best practices
• Provide guidance and mentorship to security team members
• Identify, assess, and mitigate security risks across the organization
• Collaborate with stakeholders to develop risk management strategies and policies
• Conduct periodic risk assessments and security audits
• Recommend and implement risk mitigation measures
• Ensure compliance with applicable security regulations and standards (e.g., GDPR, CCRA and SOC 2 Type 2)
• Monitor changes in regulatory requirements and update security controls accordingly
• Assist with internal and external security audits

You’re a great candidate if…

• Bachelor's degree in Computer Science, Information Security, or a related field
• Professional certifications such as CISSP, CISM, or GIAC are desirable
• Extensive experience in information security, including hands-on experience in security operations, incident response, and vulnerability management
• Extensive experience as a software developer
• Strong knowledge of security principles, standards, and best practices
• Experience with security technologies such as firewalls, IDS/IPS, SIEM, endpoint protection, and encryption
• Familiarity with cloud security concepts and technologies (e.g., AWS, Azure, GCP)
• Proficient in scripting and programming languages (e.g., Python, Bash)
• Excellent problem-solving and analytical skills
• Strong communication and interpersonal skills
• Experience with social networks and fraud prevention