Security Engineer 5 - Product & Application Security

PagerDuty is seeking a Staff Security Engineer 5 to join our diverse, customer-focused team! As a Staff Security Engineer 5, you will bring your rich technical experience securing applications in a cloud native environment. You will be a part of an amazing team that’s intensely focused on securing our products, improving our security processes, and building the future of security at PagerDuty.

This is an exciting opportunity to build security solutions that make developers and customers happy. The ideal candidate will have a blend of experiences across large enterprise environments and small or mid-size environments and will have focused on establishing security standards, coordinating with product development teams, developing strategies for secure-by-default architectures, and corresponding process and tooling selection and implementation. Things that make you smile: secure product architectures, providing an engaging Developer Experience for security adoption, and cute animal memes.

Key Responsibilities

• Responsible for leading, designing, implementing, and configuring security controls for SaaS applications in a cloud-based infrastructure environment.
• Lead complex projects that require in-depth knowledge across technical, solutions, and business, and collaborate across the broader engineering organization.
• Identify threats and vulnerabilities, security gaps, and recommend enhancements and changes to increase product and infrastructure security posture.
• Support security operations to provide the protection of the confidentiality, availability, and integrity of customer data and building/maintaining customer trust.
• Partner with product/engineering, corporate operations, and employees to build and maintain a security-aware culture where everyone understands and plays their part
• Provide thought leadership on modern security operations and help lead our infrastructure security organization in creating trust through security.
• Participating in our team’s on-call rotation, triaging and addressing security issues as they arise.
• Mentor and grow application security engineers. 
• You have a desire to stay ahead of the latest industry trends and technologies, a track record of sharing contributions to the wider security engineering community and a commitment to continuous learning.
• You believe security should make it easy to do the right thing.
• You are an expert at leading collaborative efforts involving large groups. 
• Expert at building consensus within and across engineering teams.

  Minimum Requirements

• 7+ years of experience in infrastructure securing infrastructure, securing infrastructure including IaaS, PaaS, SaaS, including network security.
• 5+ years experience with cloud-native security experience, cloud-native based application security best practices.
• Experience with Linux operating systems, scripting languages such as Python, configuration languages like YAML, JSON and technologies such as Terraform and/or Cloudformation, configuration tools such as Chef or Ansible.
• Experience with AWS cloud security best practices, and AWS security technologies such as AWS IAM, AWS Organizations, AWS Shield, AWS GuardDuty.
• Excellent written and verbal communication skills.
• The ability to compress intricate security challenges into concise descriptions.
• The ability to solve security problems without saying "No".
• You have a track record of stepping up and leading successful security engineering projects.
• Past experience with application security, security testing, code reviews and identity and access management
• Past experience with threat analysis, threat hunting, proactive security practices
• Prior experience with Application Security, Secure SDL for cloud native services.
• Experience with containerized applications, and technologies, such as Docker and Kubernetes.
• Experience working in a continuous delivery/continuous deployment environment.

Preferred Qualifications

• Certifications such as AWS Security Speciality, (ISC)2 Certified Cloud Security Professional (CCSP), (ISC)2 CISSP (Certified Information Systems Security Professional).

The base salary range for this position is 192,000 - 319,000 USD. This role may also be eligible for bonus, commission, equity, and/or benefits.

Our base salary ranges are determined by role, level, and location. The range, which is subject to change based on primary work location, reflects the minimum and maximum base salary we expect to pay newly hired employees for the position. Within the range, we determine pay for an individual based on a number of factors including market location, job-related knowledge, skills/competencies and experience.

Your recruiter can share more about the specific offerings for this role, as well as the salary range for your primary work location during the hiring process.