Position Overview
The Senior Information / Cybersecurity Analyst will report to the Dev-Sec-Ops manager and take a lead role in developing systems, policies, and procedures to ensure REsurety’s advanced research and financial trading platforms are secure against all forms of cyberattacks.
As a Staff Infosec Engineer, your responsibilities include protecting REsurity’s digital data and computer systems from threats such as data breaches and cyberattacks, monitoring systems, and identifying vulnerabilities.
In this role, you will work with the DevOps Cloud Services and the Architecture Teams to ensure the cloud-based architectural design by implementing security measures like firewalls, code scanning tools, and enterprise monitoring solutions. Also, investigate internal and external breaches and security incidents.
Key Responsibilities
- Implements and maintains enterprise security protocols, tools, and systems to monitor for risk management and vulnerabilities.
- Documents and Maintains Incident Response Plans (IRP) and manages issues from discovery through closure.
- Investigates breaches, conducts root cause analysis, and performs digital forensics.
- Develop frameworks to meet regulatory standards, including SOC 2, ISO 27001, and NIST.
- Evaluates vendor security and manages supply chain risk.
- Coordinates with the technical leadership team and manages all client communication of Security Compliance questionnaires.
- Implements a process to manage a knowledge base of info, cyber, and data security-related questions to provide consistent, qualified, and detailed responses.
- Manage information and cybersecurity training and awareness programs for all employees.
- Software Engineering and Development e.g. C++, Python, Java, Java script
- AWS Cloud Services, e.,g S3, EC2, Lambda, ECS, ECR, Cloud Watch
- Data management, storage models, and access patterns.
Required Experience & Qualifications
- Bachelor's degree in Computer Science, Information Security, or a related field; a Master's degree is a plus.
- 5 years of experience in a senior cybersecurity role, with a proven track record of building and managing security programs.
- Demonstrated experience in managing and responding to customer-facing security questionnaires and audits, and effectively communicating security and compliance controls to customers.
- Strong technical background in cloud security (AWS, Azure, or GCP), application security, and network security.
- Strategic thinker with a proactive and results-oriented approach to problem-solving.
Preferred Qualifications
- Experience helping organizations achieve SOC 2 Type 1 and/or Type 2 attestation.
- Familiarity with tools such as Terraform, Atlassian, GitHub, Jenkins, etc.
- Hands-on experience in secure code review, threat modeling, and cloud security automation.
- Certifications such as CISSP, CISM, Security+, or AWS Security Specialty are a plus.
Details
- Location: Boston, MA
- Our organization works on a hybrid model. We are in the office on Mondays, Tuesdays, and Thursdays at our downtown Boston building, and remote work is optional on Wednesdays and Fridays.
Compensation and Benefits
- The base compensation range for this position is $153,850 to $208,150. Actual starting pay is determined by a number of factors, including relevant skills, qualifications, and experience. This range does not include annual bonus, equity-based incentives, and benefits.
- Benefits information can be found on our Careers page.
Learn more about working at REsurety and our benefits information on our Careers page.
About REsurety, Inc.
Company Overview
REsurety is the leading provider of data, software, and services to the clean energy economy and operates the only transactional marketplace for clean power. Trusted by the industry’s leading buyers, sellers, and investors, REsurety’s proprietary data models, powerful technology platforms, and deep domain expertise empower confident, impactful decision-making and efficient, effective portfolio management.
We are a small team with a big impact! Our culture is open and collaborative. We expect excellence from our team members and reward it with high ownership and flexibility. If you’re a high-achiever with a passion for clean energy, we want to hear from you.
Company Values and Principles
At REsurety, we value the skills of execution, creativity & ownership, commercial focus, and teamwork, and we help and encourage all team members to develop these skills while at REsurety.
Our values also shape our culture and act as the foundation for our principles. Like all great companies, we strive to hire the best and are committed to building a diverse, inclusive company where team members feel engaged, valued, and supported. What is special about REsurety, though, is how much we:
- Share information openly, broadly and deliberately with each other;
- Encourage ownership by all team members;
- Provide continuous, constructive feedback; and
- Empower all team members to bring their full, authentic selves to work.
Details
- Location: Boston, MA
- Our organization works on a hybrid model. We are in the office on Mondays, Tuesdays, and Thursdays at our downtown Boston building, remote optional on Wednesdays and Fridays.
Learn more about working at REsurety and our benefits information on our Careers page.