Enterprise Security Engineer

Introduction to Demandbase: 

Demandbase is the Smarter GTM™ company for B2B brands. We help marketing and sales teams overcome the disruptive data and technology fragmentation that inhibits insight and forces them to spam their prospects. We do this by injecting Account Intelligence into every step of the buyer journey, wherever our clients interact with customers, and by helping them orchestrate every action across systems and channels - through advertising, account-based experience, and sales motions. The result? You spot opportunities earlier, engage with them more intelligently, and close deals faster. 

As a company, we’re as committed to growing careers as we are to building world-class technology. We invest heavily in people, our culture, and the community around us. We have offices in the San Francisco Bay Area, New York, Seattle, and teams in the UK and India . We have also been continuously recognized as one of the best places to work in the San Francisco Bay Area.

We're committed to attracting, developing, retaining, and promoting a diverse workforce. By ensuring that every Demandbase employee is able to bring a diversity of talents to work, we're increasingly capable of living out our mission to transform how B2B goes to market. We encourage people from historically underrepresented backgrounds and all walks of life to apply. Come grow with us at Demandbase!

About the Role:

We’re looking for an Enterprise Security Engineer to help grow and mature our enterprise security program. This is a hands-on technical role that also offers the opportunity to shape the strategy and roadmap for security in a modern, distributed enterprise environment.

You’ll help establish standards, promote best practices across the organization, and mentor junior team members. You’ll be supported by an established IT team that values and embraces security objectives, a product security team focused on our customer-facing SaaS platform, and privacy and GRC teams that provide guidance on risk and compliance.

Bring your passion, expertise, initiative, and creativity to Demandbase, and help us elevate our enterprise security program to the next level of excellence!

What you’ll be doing:

• Improve success metrics for enterprise security functions and drive greater maturity over time
• Serve as technical domain expert for all things pertaining to enterprise security
• Define patch, vulnerability, and configuration management programs across the corporate IT landscape and work with IT to implement
• Consult with the IT team on change management providing insight to the security ramifications of proposed changes
• Assist in the vendor review process ensuring the prospective vendors live up to Demandbase standards of security
• Contribute to and enforce our company's IT and Security policies and procedures
• Monitor internal and external systems for security threats and respond to alerts
• Work with the internal team to support other compliance initiatives such as SOC 2, privacy, and ISO 27001
• Experience with NIST Cybersecurity Framework (CSF) or similar frameworks

What we’re looking for:

• 6+ years in Information Technology at a software company
• 3+ years in Information Security at a software company
• Hardening infrastructure and applications in a SaaS environment, including Okta, Google Workspace, Salesforce and others
• Managing network security, including wireless networks, VPNs, and firewall configuration
• Configuring modern enterprise communications security, such as on Slack, Zoom, & Google Workspace 
• Creating secure baselines for and hardening of user endpoints (MacOS, Windows)
• Configuring & securing cloud infrastructure environments in AWS, GCP, and/or Azure
• Participation in risk assessment and BCP/DR initiatives
• Experience with detection & response capabilities, including telemetry source, alerting, triage, analysis, and response activities

The ideal candidate will have:

• The ability to take a pragmatic, risk-based approach to decision-making while applying practical security principles and practices
• Exceptional written and verbal communication skills
• Strong ability to work independently and learn new skills as necessary to be successful
• Certifications and academic degrees are nice to have, but we’re far more interested in seeing you demonstrate passion, initiative, and domain expertise.

Our Commitment to Diversity, Equity, and Inclusion at Demandbase

At Demandbase, we believe in creating a workplace culture that values and celebrates diversity in all its forms. We recognize that everyone brings unique experiences, perspectives, and identities to the table, and we are committed to building a community where everyone feels valued, respected, and supported. Discrimination of any kind is not tolerated, and we strive to ensure that every individual has an equal opportunity to succeed and grow, regardless of their gender identity, sexual orientation, disability, race, ethnicity, background, marital status, genetic information, education level, veteran status, national origin, or any other protected status. We do not automatically disqualify applicants with criminal records and will consider each applicant on a case-by-case basis.

We recognize that not all candidates will have every skill or qualification listed in this job description. If you feel you have the level of experience to be successful in the role, we encourage you to apply!

We acknowledge that true diversity and inclusion require ongoing effort, and we are committed to doing the work required to make our workplace a safe and equitable space for all. Join us in building a community where we can learn from each other, celebrate our differences, and work together.