Senior Application Security Engineer (copy)

Top Three Outcomes for Year One

• Intimately understand Revinate’s business, our application stack and own (technically and operationally) the Application Security function 
• Lead and execute two major Application Security initiatives, full bi-directional engagement of AppSec function between Security and all of engineering
• Ensure all SaaS Applications adhere to AppSec Security Standards and improvements are well managed (identified, documented and tracked to resolution)

What You'll Do

• Own and maintain engineerings applications security standards, procedures, and execution with the AppDev, Data Science and Product Teams 
• Drive application security standards
• Own and maintain day to day Application Security Monitoring, Observability, Triage, Resolution, Improvements, Internal Investigations, Incident Response 
• Full participation in internal and external compliance initiatives including but not limited to internal and external PenTesting,  Annual NIST Evaluation, engineering Security Training, Application Scans, Phish Testing)
• Participate in 24x7 Security Support
• Monitor, Audit and harden existing infrastructure, automation (event handling), code and processes
• Proactively protect Revinate from all external threats to Revinate’s SaaS Applications 
• Manage and resolve new threats to Revinate’s SaaS Applications
• Maintain your industry leading knowledge and understanding of Security, Risk and Compliance and Privacy as it relates to Security 
• Ensure security requirements and considerations are woven into the development of each system
• Maintain and enhance IAM framework and function with IT/Security for the organization, platforms and applications
• Automate Revinate’s security processes using AWS and GCP tools (others where applicable), as well as developing custom security automation 
• Architect, build and enforce end to end security tools which are embedded into the SDLC process and integrated into current & future CICD pipelines
• Administer network and data security, including directory, group policy, firewalls, antivirus, email security, etc. 
• Mobile Device Management tools for Security purposes

What You'll Bring

• 7+ years of experience in Cyber Security 
• 5+ years of experience with Security Operations 
• 5+  years of Cloud Infrastructure
• 3+ years of GCP and AWS
• 3+ years of Security Technical Leadership/Project experience
• Excellent communication and problem solving
• Ability to communicate technical instructions to technical and non-technical audiences 
• Application Security structure and maturity to our CICD pipelines, Change & Release tooling, GuestFeedback, Marketing, the DataPlatform, ResSales and Messaging products
• Hands on expertise in Cyber Security to ensure our SaaS applications are secure 
• Subject Matter expertise on Application Security Engineering 

What We Can Offer

• Discretionary Time Off: You’re in control of your rest and relaxation 
• Family Support: Parental leave for those expecting new family members
• Equity: You're an owner in the company as we build it together
• Tools & Tech: We empower our employees with the hardware, training, and other materials to help you succeed
• Extraordinary Culture: Focused on learning and every employee’s personal and professional development
• Change An Industry: We’re transforming the way hotels connect with guests, and having fun while we do it
• Meaningful Work: You'll have an opportunity to make a major impact on our company and, as a result, the hospitality industry
• Amazing Co-Workers: You'll be surrounded by a passionate, high performing, collaborative team that can help you learn something new every day