Senior Security Engineer, Cloud Security

Who We Are

At Justworks, you'll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people.

We're helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We're data-driven and never stop iterating. If you'd like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we'd love to hear from you.

We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team.

Our Values

If this sounds like you, you'll fit right in.

Who You Are

At Justworks, we're on a mission to help entrepreneurs and growing businesses thrive by simplifying payroll, benefits, HR, and compliance. Our work supports a diverse and global workforce-so we're building a security team that can match our scale and ambition.

We're looking for an experienced Senior Security Engineer with expertise in Cloud Security to join our Security Architecture & Engineering (SAE) function. You will play a critical role in securing our cloud infrastructure and applications, implementing and managing security solutions for our AWS environment, Kubernetes (EKS) deployments, and related services. Our work takes the form of tool development, cloud security operations, guidance, and strategy. You should feel comfortable moving between each at any given time.

We leverage a number of technologies to power our tools and platform, including AWS, Kubernetes (EKS), Terraform, Datadog, and write our code in Ruby, Python, and Go just to name a few.
Your Success Profile
What You Will Work On

• Design and implement secure, scalable, and resilient cloud architectures on AWS that meet business requirements, compliance needs, security considerations, and regulatory requirements.
• Design, implement, and build identity security controls that leverage Just in Time access, principle of least privilege (PoLP), and other identity security management concepts.
• Implement Policy-as-code to enforce security-by-default and security-by-scale
• Secure containers, build pipelines, and infrastructure with cutting-edge security solutions or custom-built tooling that are automated, observable, and built to last.
• Collaborate with cross-functional partners to enhance our growing self-service infrastructure
• Lead and influence the technical direction of strategic security initiatives, owning medium-to-large scale engineering projects within the Cloud and Enterprise Security domains
• Continuously monitor and evaluate emerging threats, technologies, and trends, translating them into actionable improvements.
• Support other security initiatives as needed based on organizational needs.

How You Will Do Your Work

As a Senior Security Engineer, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:

• Good judgment - the exercise of critical thinking, analyzing and assessing problems and implications, identifying patterns, making connections of underlying issues, understanding risks and developing mitigation strategies, and taking ownership of the outcome.
• Resourcefulness - taking a can-do approach, even in the face of obstacles and constraints by assessing what's in front of you and effectively and efficiently optimizing what you have, whether it's working on something new or thinking about how to do something better.
• Teamwork and communication - putting our collective best together through documentation, collaboration, relationship-building, listening, empathy, recruiting, and evangelism.
• Influence and leadership - fostering a community of knowledge-sharing, collaboration, mentorship, and forward-thinking.
• Skills and knowledge - the capacity to actively learn and apply specific domain knowledge, know-how, and best practices to continually enhance and improve.

In addition, all Justworkers focus on aligning their behaviors to our core values known as COGIS. It stands for:

• Camaraderie - Day to day you can be seen working together toward a higher purpose. You like to have fun. You're an active listener, treat people respectfully, and have a strong desire to know and help others.
• Openness - Your default is to be open. You're willing to share information, understand other perspectives, and consider new possibilities. You're curious, ask open questions, and are receptive to thoughts and feedback from others.
• Grit - You demonstrate grit by having the courage to commit and persevere. You're committed, earnest, and dive in to get the job done well with a positive attitude.
• Integrity - Simply put, do what you say and say what you'll do. You're honest and forthright, have a strong moral compass, and strive to match your words with your actions while leading by example.
• Simplicity - Be like Einstein: "Everything should be made as simple as possible, but no simpler."

What We're Looking For

• You are a pragmatic security engineer with a proven track record of building, operating, and contributing to the architecture of systems deployed in public cloud providers (AWS preferred)
• Minimum of 5 years experience in information security concepts, common technical security controls, and security design principles, ideally in a SaaS environment
• Familiar with AWS infrastructure and core services including security services, 3+ years AWS experience is preferred
• Strong technical proficiency with EKS, containers, and runtime security controls
• Strong scripting experience in cloud environments
• Familiarity with Zero Trust architectures and identity security models
• Ability to evaluate, implement, and operate cloud native security solutions (CSPM, CNAPP, ZTNA, CASB/SWG)
• In-depth experience with automation and development-based approaches using scripting languages. You understand the challenges of scale for security and leverage automation whenever possible.
• You are comfortable teaching and leading teams toward better security outcomes.
• You have excellent verbal and written communication skills and a product-focused mindset to both serve and delight customers
• Experience acting as a tech lead in an agile, high-growth environment
• Experience designing services in public cloud providers (AWS, GCP, Azure)
• AWS Certification is preferred
• Preferred Security Certifications: CISSP, CISM, CRISC, CCSP or CEH

The base wage range for this position based in our New York City Office is targeted at $192,500.00 to $211,750.00 per year.

Actual compensation is based on multiple factors that are unique to each candidate, including and not limited to skill set, level of relevant experience, and specific work location. Salary ranges for positions based in other locations may differ based on the cost of labor in that location.

For more information about Justworks' Total Reward Philosophy, including all of the perks and benefits we are proud to offer our team members, please visit Total Rewards @ Justworks.
Diversity At Justworks

Justworks is committed to maintaining a workplace where diversity of identity, culture, and life experience is the norm and is celebrated authentically and respected consistently. Diversity in our work, our people, and our product drives creativity and innovation, entrepreneurial leadership and integrity, competitiveness, and collaboration throughout our business and in the market. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our customers.

We're proud to be an equal opportunity employer open to all qualified applicants regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital or familial status, disability, pregnancy, gender identity or expression, veteran status, genetic information, or any other legally protected status. Justworks is fully dedicated to providing necessary support to candidates with disabilities who may require reasonable accommodations. We also provide reasonable accommodations to employees based on their sincerely held religious beliefs, as well as for other covered reasons consistent with applicable federal, state, and local laws. If you're in need of a reasonable accommodation, please reach out to us at accommodations@justworks.com. Your comfort and success matter to us, and we're here to ensure an inclusive experience.

Our DEIB Report and Our DEI Commitment