Sr. Security Engineer

Responsibilities

• Authentication and identity services, including multi-factor solutions, network access control identity servers, and related authentication and authorization technologies.
• Identity lifecycle management services and automation. Build and maintain scripts and automation that support the information security mission across The Boring Company, to be utilized by information security teammates and other partner organizations.
• Network security systems and the backend infrastructure that powers such services.
• Application level security controls (e.g. web application firewalls).
• Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.
• Serve as the subject matter expert (SME) for those solutions, maintaining documentation on them and advising others on their underlying technologies and operation.
• Work with security and IT teams to identify threats and problem areas, using that feedback to further strengthen tools and technologies. Materialize this as improvements which result in stronger and safer software and application deployments across The Boring Company, measuring in decreased risk and prevalence of issues.
• Create solutions that are scalable, repeatable, maintainable, and secure.
• Work collaboratively with other teams, including individuals in information security, physical security, information technology, human resources, legal, software, and others.

Basic Qualifications

• Development experience in any modern programming language (including but not limited to Python, C++, Rust, Go)
• Experience developing security architectures and primitives (i.e. TLS, Zero-Trust)
• 5+ years of professional experience in security engineering with a bachelor's degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline; OR 7+ years of professional experience in security engineering in lieu of a degree