Lead Security Engineer

We are Rokt, a hyper-growth ecommerce leader. We enable companies to unlock value by making each transaction relevant at the moment that matters most, when customers are buying. Together, Rokt's AI-based relevance Platform and scaled ecommerce Network powers billions of transactions. In December 2022, Rokt’s valuation increased to $2.4 billion USD, allowing us to expand rapidly across 15 countries. 

The Rokt engineering team builds best-in-class ecommerce technology that provides personalized and relevant experiences for customers globally and empowers marketers with sophisticated, AI-driven tooling to better understand consumers. Our bespoke platform handles millions of transactions per day and considers billions of data points which give engineers the opportunity to build technology at scale, collaborate across teams and gain exposure to a wide range of technology.

At Rokt, we practice transparency in career paths and compensation.

At Rokt, we believe in transparency, which is why we have a well-defined career ladder with transparent compensation and clear career paths based on competency and ability. Rokt’stars constantly strive to raise the bar, pushing the envelope of what is possible.

We are looking for a Lead Security Engineer

Compensation: $190,000-$235,000 including superannuation, plus employee equity plan grant & world class benefits.

As a Lead Security Engineer, you are someone has some experience leading a team at a fast-past startup or in a recognised cybersecurity consulting firm, leading delivery of Cloud-first products or have been involved in the re-architecture of existing Cloud infrastructure towards Cloud-native design patterns that are horizontally scalable with always-up guarantees.

You'll be able to drive design decisions to establish a ‘paved road’ for the business to be able to deliver software and services using secure-by-default and secure-by-design patterns where security is automatically baked in, with a vision for what a highly secure Kubernetes environment and modern SSDLC process should like and are excited to get an opportunity to have the autonomy and remit to take charge and help drive change at Rokt to deliver on that vision.

About the Role:

• Lead the existing Security Engineering team in Sydney, whom are focused on Cloud, Data, Network, and Application security
• Assist in the design and delivery of a secure-by-default and secure-by-design core operating environment based on ‘Zero Trust’ principles
• Assist in the design and delivery of a standardized SDLC process with automated CI/CD pipelines to provide security assurance and address supply chain risks throughout the development lifecycle
• Develop security standards, guidelines and architectural patterns that facilitate rapid deployment of new applications and services while maintaining security best practices.
• Define a comprehensive Cloud security strategy and change management process, ensuring all infrastructure, configuration, applications and policies are managed ‘as code’ and pass necessary security gates.
• Ensure all data stored in the Cloud is discovered and appropriately governed and protected in accordance with compliance requirements and business goals..

About You:

• 8+ years in security engineering, and 3+ years as a hands on team lead or manager.
• Navigated large scale and multi-Cloud environments, in active-active configurations with an expectation of zero downtime, using either or both AWS & GCP, with strong expertise in Kubernetes and familiarity with CNCF projects (Istio/Envoy, Cillium, OPA, Tetragon, …)
• Good understanding of security technologies, including network security, cryptography, workload identity and authorization, secure coding practices, cloud security, and more. Stay updated on the latest security threats and mitigation techniques.
• Some software engineering background including coding patterns and foundational algorithms
• Experience maturing a software delivery pipeline using modern supply chain best practices and technologies, including immutable builds, hermetic builds, SLSA, OpenSSF, SBOM, CBOM, code signing, etc.