Software Engineer II, Cyber Security

About the Team:

The Cyber Security Engineering Team is responsible for protecting Wayfair’s production systems wherever they may live.  We constantly seek innovative and automated ways to implement security throughout the Wayfair environment.  We also thrive on generating and enriching security data for incident responders so they are well informed about the threats we face.  We are looking to bring on an experienced Senior Security Engineer who can help us prototype and build core pieces of security infrastructure.  This person should have extensive experience in and a well-rounded knowledge of applying security engineering principles in a large and technologically diverse enterprise environment.  

What You’ll Do: 

• Designing and prototyping technology solutions that solve security challenges within the realm of Cloud and Infrastructure Security, PKI, Authentication & Authorization.
• Solving security problems through tactical synthesis of core infrastructure, code, and automation that embed security into our Cloud Solutions.
• Serving as a primary go-to security advisor for other engineering teams and engaging in Threat Modelling and Security Design Reviews with various stakeholders.
• Evaluating and prototyping new Security solutions to level up Wayfair’s Security Posture.
  
  

What You’ll Bring:

• Bachelor's degree in IT, CS, Engineering, Mathematics or a related field and 6+ years of experience in a security or information technology related field
• The ability to solve security problems with multiple solutions and thoroughly explain the risks and tradeoffs of each.
• In-depth knowledge of industry standards such as OAuth2, OpenID, x.509, TLS, TCP/IP, and SAML
• Certification in cloud security is always a plus.
• Principles of DevOps, cloud operations and its relevant tools which can be leveraged for security.
• High Level understanding of industry regulations such as PCI, Sarbanes-Oxley, and GDPR.
• Experience working with Security in at least one public cloud platform, preferably GCP. 
• Experience with Kubernetes, Open Policy Agent and Infrastructure as Code (Terraform preferred), as well as with Python or other modern scripting languages.
• Experience with Data technologies such as BigQuery and Data Studio.