Cape is the privacy-first mobile network.
Security Engineer, Product Security
Location
United States
Posted
61 days ago
Salary
0
Seniority
Mid Level
Job Description
Security Engineer, Product Security
Cape
The Company Cape was founded in early 2022 by Palantir and Anduril alums with deep expertise in privacy and national security. While running Palantir’s US national security business, our CEO became passionate about privacy and security on mobile devices. Our mission is to be a force for good in global wireless. At Cape, we are not just another cellular service provider; we are the architects of a privacy-centric movement that starts with the devices in your pocket. We are building a cellular network that helps citizens, including those responsible for our nation’s security, regain control of their own data. We believe that where we are, where we go, and whom we are with are among our most personal information and should be kept private. Privacy is not something you achieve by limiting yourself or by doing less, it is a set of features to be built so you can do more. We have raised money from Andreessen Horowitz and other top-tier VCs, and are excited to grow the team. The Team We are relentless builders, constantly innovating and pushing the boundaries of what a telco can do. At Cape we trust our teammates to be great, and expect them to make profound impact. As a member of our team, you will collaborate with some of the smartest engineers, architects, and builders anywhere, working across organizational lines to deliver for our customers, every time. The Role We are seeking an experienced Security Engineer with a specialization in product security to join our team. As a strategic partner, you will make an immediate impact by leveraging your expertise in cloud and application security. This role is pivotal in reducing risk across our AWS cloud environments, mobile core infrastructure, and mobile applications. You will be responsible for designing, implementing, and that comply with regulatory standards, enhance internal processes, and minimize data security risks. Through developing ongoing security strategies and technologies, you will support the organization's business objectives and daily operations. Responsibilities - Design, implement, and manage robust security controls and policies within AWS, focusing on the confidentiality, integrity, and availability of data and services. - Perform comprehensive security assessments of our cloud environments to identify vulnerabilities, assess risks, and recommend actionable mitigation strategies. - Lead the integration of security practices into the DevOps lifecycle, promoting secure development, deployment, and operational processes. - Utilize and optimize AWS security tools (such as Amazon GuardDuty, Amazon Inspector, AWS IAM, AWS KMS, AWS WAF, and AWS Shield) and explore third-party solutions to bolster our security posture. - Assist in running and address findings from penetration tests and security audits, and ensuring prompt and effective remediation. - Stay informed about the latest security threats, vulnerabilities, and compliance mandates affecting cloud environments, provide strategic guidance on technologies and best practices. - Provide expert mentorship to junior security team members and engineers across the company, to foster an organizational culture of security awareness and continuous improvement. - Collaborate with stakeholders to integrate security requirements effectively into engineering projects and broader business initiatives. Preferred Experience - Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience), Advanced degrees or certifications (e.g., CISSP, AWS Certified Security Specialty) are advantageous. - A minimum of 5 years of experience in information security, with at least 3 years concentrated on cloud security within AWS environments. - Deep understanding of AWS architecture, security services, and best practices for securing cloud applications and data. - Proficiency in using infrastructure as code (IaC) tools (like Terraform or AWS CloudFormation) and in automating security tasks within AWS. - Skilled in scripting languages (Python, TypeScript, Go) for the automation of security tasks and the integration of security tools. - Familiarity with containerization and microservices, particularly in securing stacks using these technologies. - Solid knowledge of network security, encryption technologies, and secure coding practices. - Excellent analytical skills for identifying and mitigating complex security vulnerabilities and risks. - Strong communication and leadership abilities, capable of working collaboratively across teams and effectively conveying technical information to non-technical stakeholders. - Organized and able to manage multiple priorities in a dynamic, fast-paced environment. Competencies Role competencies - Security Expertise: Experience finding and resolving security issues and vulnerabilities in code. Bug Bounty programs. Secure by design principals and working with engineers during design time. - Analytical: Collects data and information; uses critical thinking to solve problems and make sound decisions. - Collaboration & Teamwork: Builds partnerships with others to reach common goals. Able to share credit with coworkers, display enthusiasm and promote a friendly group working environment. Works closely with other departments as necessary, supports group decisions and solicits opinions from coworkers. - Communication: Presents information through verbal and written communication; reads and interprets complex information; listens well. Develops and delivers multi-mode communications that convey clear understanding of unique audiences. - Decision-Making: Acts quickly to solve problems and exercises good judgment by making sound and well-informed decisions. Perceives the impact and implications of decisions; makes effective and timely decisions, even when data is limited. - Dependability/Self-Management: Possesses the personal discipline and diligence necessary to keep commitments and to complete tasks. Is accountable for actions and outcomes. Makes effort to improve situations without explicit instructions; a self-starter who consciously manages his/her own time and resources. - Customer Centric: Values the importance of delivering high quality, innovative service to employees; understands the needs of the client; responds promptly and is accessible to them; follows through on commitments in a timely manner; maintains positive, long-term working relationships; assumes ownership of process issues and takes appropriate steps to mitigate problems. Gets consistently high feedback from stakeholders. Raises hand to help. - Flexibility / adaptability: Adjusts quickly to changing priorities, conditions, and challenges. Copes effectively with complexity and change. Is comfortable navigating ambiguity. Can handle business changes with ease and with a lack of frustration or feeling of defeat. Feels comfortable dealing with limited unknowns in an area they are well versed in. - Planning & Organization: Manages multiple projects, determines project urgency in a meaningful and practical way, uses goals to guide actions, creates detailed action plans, and organizes tasks. Cape-specific competencies - Do Excellent Work - Respect The Opportunity (each other, the user) - Overshare - Bias Towards Action We offer competitive compensation that is geo-adjusted based on your location, along with meaningful equity so you share in the value you help create. Our benefits include: - 401(k) match - 100% coverage of medical, dental, and vision premiums for you and your dependents - 12 weeks paid parental leave (for all parents, no waiting period) - Stipends for - Family-forming needs - Gender-affirming care - Unlimited PTO Our Culture - We are builders, and we choose to spend our time building things that matter. Many of our people have backgrounds in Defense Tech as well as the defense and intelligence community. We build to win. - We hire excellent people, give them outsized responsibility, and trust them to execute at a high level. Everyone here has a track record of solving hard problems throughout their careers. - We believe that personal privacy and national security interests are not inherently at odds, and can be reconciled via strong technology. - We believe that companies exist to build awesome things and take care of their people. Our benefits reflect that– top-tier health care, 401(k) matching, and a generous vacation policy (that we actually use). - We hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Achieving diversity across these categories will serve to make our company stronger and our product better. How to apply Click the link below to apply. We reserve the right to make use of any unsolicited resumes received from outside recruiting agencies and / or individual recruiters without being responsible for payment of any fees asserted from the use of unsolicited resumes.
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
Senior Cybersecurity Engineer – Security Assessment
DexcomEmpowering people to take control of health
• You will support or manage the full lifecycle of vendor, application, compliance, and security assessments, including launch and coordination. • You will leverage your technical expertise to progress technical security assessments of new tools, applications and systems independently, including guiding end-to-end completion, developing pre and post implementation requirements, and managing exception requests. • You must coordinate with internal stakeholders including IT, compliance, procurement, legal, and other relevant teams to ensure comprehensive coverage and clarity of requirements. • You must maintain accurate documentation and reporting to facilitate transparency and informed decision-making. • You must continuously identify opportunities for process improvement, efficiency gains, and enhanced accuracy of assessments. • You will, at times, provide security consulting and influence adoption of security best practices. • You may support information security and data privacy compliance audits and associated activities or if needed, support incident response.
Physical Security Specialist
EEOCAdvancing EEO for all. Sharing information here to help you understand and prevent employment discrimination.
• Conduct physical security assessments of financial centers, offices, and ATMs to proactively identify vulnerabilities, evaluate risk exposure, and develop prioritized recommendations. • Provide operational oversight for security technologies such as alarm and fire systems, access control, and video surveillance. • Lead the planning and execution of system installations, upgrades, integrations and lifecycle management. • Partner with internal stakeholders and external vendors to ensure systems operate effectively, securely, and in compliance with organizational requirements. • Manage access control additions, including permissions, terminations and badging. • Serve as a primary responder and lead coordinator for security incidents. • Prepare incident reports, security-related assessments and other applicable reports upon request. • Deliver training and guidance to employees on security procedures, robbery response, alarm protocols, and overall security awareness. • Serve as a subject matter expert for internal business units and leadership, by advising on security risks, standards, and solutions.
Social Security Intake Support Specialist
Job DuckWe help incredible people find an amazing job working from home for a United States based business.
• Answer incoming calls and respond to client emails as needed. • Open and organize case files within the system. • Review returned packets for completeness and accuracy. • Document all client interactions in the case management system. • Maintain ongoing communication with clients regarding missing information and next steps. • Send intake packets and communicate expectations for timely completion. • Track and document all follow-up efforts related to costs and required documentation. • Follow up on appeal forms including DIB and SSA 827 authorizations. • Conduct hearing reminders via text message or phone call to support client preparedness. • Follow up on intake packets to confirm completion and return of all required documentation. • Follow up on outstanding medical records to ensure timely receipt and proper documentation. • Support attorneys and supervisors with additional tasks and projects as assigned. • Upload, scan and categorize documents correctly. • Prepare and send cost reminder letters regarding outstanding balances or payments. • Track and properly save all appeal-related documentation. • Prepare appeal paperwork ensuring accuracy and completeness prior to submission. • Download and organize electronic files into the case management system.
Sr. Network Security Engineer
Kaseya CareersKaseya is the leading provider of complete IT infrastructure and security management solutions for Managed Service Providers (MSPs) and internal IT organizations worldwide powered by AI. Founded in 2000, Kaseya currently serves customers in over 20 countries across a wide variety of industries and manages over 15 million endpoints worldwide.
Kaseya® is the leading provider of complete IT infrastructure and security management solutions for Managed Service Providers (MSPs) and internal IT organizations worldwide powered by AI. Kaseya’s best-in-breed technologies allow organizations to efficiently manage and secure IT to drive sustained business success. Kaseya has achieved sustained, strong double-digit growth over the past several years and is backed by Insight Venture Partners www.insightpartners.com), a leading global private equity firm investing in high-growth technology and software companies that drive transformative change in the industries they serve. Founded in 2000, Kaseya currently serves customers in over 20 countries across a wide variety of industries and manages over 15 million endpoints worldwide. To learn more about our company and our award-winning solutions, go to www.Kaseya.com and for more information on Kaseya’s culture. Kaseya is not your typical company. We are not afraid to tell you exactly who we are and our expectations. The thousands of people that succeed at Kaseya are prepared to go above and beyond for the betterment of our customers. As a member of the Network Security team, this role is tasked with proactive management and monitoring of the Company's infrastructure and cloud computing services, with a particular focus on Network Security, and participating in any needed troubleshooting and investigations. Individuals in this role will also assist with other security-related tasks, such as administration, configuration, and deployment of security solutions – and will collaborate closely with Information Security on relevant tasks, such as vulnerability management. The successful candidate for this position is a highly-motivated individual with a strong background in Networking, Security and Enterprise Systems who excels in operating and deploying security technology, communicating clearly in both technical and nontechnical settings, and collaborating with diverse teams across the organization. About the Role A Senior Network Security Engineer is expected to take ownership of, manage and maintain network security systems and tools, and troubleshoot highly technical issues in a logical manner to reach a final resolution. They should recommend solutions to solve these issues and work closely with other team members to meet common objectives. This engineer should have a deep understanding of firewalls and security best-practice, familiarity with route/switch (including dynamic protocols) and other datacenter technologies. Proven, demonstrated success managing datacenter firewall, security and networking solutions in a large enterprise environment is a requirement. Senior engineers should be eager to learn and work on new hardware and technologies, be very self-motivated and be able to succeed with minimal day-to-day supervision – but also able and willing to take direction. They may also function in a lead capacity for specific projects or functional areas and are expected to help mentor teammates. We value professionalism, humility and collaboration. Respect for teammates and stakeholders – irrespective of background or title – is essential. Key Responsibilities - Research, evaluate, develop, and implement security solutions and standards following industry best practices. - Ensure that current and planned technical solutions are compatible with the company's business needs and strategic objectives. - Maintain and operate toolsets and services which support network security operations in the company’s production environments. - Work with other teams to design, develop, and implement Enterprise Security solutions in support of development, test, and production environments. - Provide technical security expertise and assistance to other business units. Contribute to the Network Security team’s capabilities by sharing knowledge and expertise. - Perform security audits and testing; evaluate system security configurations to ensure efficacy and compliance with documented policies, procedures and best practices - Propose changes to existing policy and procedure to maintain alignment with evolving business requirements, best practices, etc. - Utilize existing tools and platforms (e.g. Jenkins, Ansible, Strata/Panorama) to ensure adherence to established standards and leverage automation where justified. - Participate in the team on-call rotation Qualifications - 7-10 years of experience with network security processes, policies and solutions - Extensive technical, hands-on experience with firewalls – specifically Palo Alto and PANW cloud services - Extensive experience with VPN – site-to-site and remote-access - Intimate understanding of networking and network security principles and technologies - Strong understanding of network protocols and applications - Strong understanding of packet inspection and forensics methodologies and methods - Strong understanding of current security threats, techniques, and landscape – as well as a dedicated and self-driven desire to research current and emerging threats in the information security landscape. - Strong understanding of standardization and automation techniques and technologies - Experience with scripting to automate repetitive or routine tasks (esp. Python) - Experience with Cisco routers and switches - Experience building and maintaining network security solutions in a large, distributed enterprise environment - Deep understanding of TCP/IP, networking, routing and switching - Highly skilled in troubleshooting techniques - Outstanding communication skills, both written and verbal Preferred Certifications - SANS GIAC certifications - PANW PCNSE / PCNSA certifications This role is fully remote and has a budget of $140,000.00 - $150,000.00 Join the Kaseya growth rocket ship and see how we are #ChangingLives ! Additional information Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.



