Our client is an American online digital brokerage firm. Our project stands out as the top investing app, offering an incredibly easy and appealing way to invest in the stock market. With 86% of the population never having had the chance to own stocks due to their intimidating cost, this application aims to break down those barriers and make stock ownership accessible to everyone.
The project: the best Investment & Asset Management Platform, an online stockbroker with an interesting, unusual twist. They pioneered fractional share investing, stock gift cards, and custodial accounts for all, including kids of any age.
The Platform enables one to buy and sell stocks and fractional shares of stock in publicly traded companies, and to buy gift cards that can be used toward the purchase of stocks and exchange-traded funds (ETFs). It is possible for anyone to own stock in their favorite companies including Amazon, Apple, Alphabet, Disney, Nike, Tesla, Cisco, Google, and 1k+ other stocks and ETFs.
Responsibilities:
- Lead security initiatives, provide suggestions for security strategy.
- Safeguards information system assets by identifying and solving potential and actual security problems.
- Protects the system by defining access privileges, control structures, and resources.
- Recognizes problems by identifying anomalies with SOC tools, and reporting violations.
- Implements security improvements by assessing the current situation; evaluating trends; anticipating requirements.
- Determines security violations and inefficiencies by conducting periodic audits.
- Upgrades system by implementing and maintaining security controls.
- Keeps users informed by preparing performance reports and communicating system status.
- Collaborate with vendors to perform penetration testing for internal and cloud environments.
- Run vulnerability scans and remediate vulnerabilities.
- Experience with PCI-DSS or SOC2 compliance audits
- Worked as a security manager/engineer for a SaaS company
- Develop and implement Information security policies and procedures
- OWASP TOP 10 for Web Applications
- Aware of PCI-DSS technical requirements
- Well-versed in security operations, cyber security tools, intrusion detection, and secured networks
- Securing Java applications
- Write correlation rules for security alerts
Applications and Tools Experience
- Cloudflare (WAF system)
- AWS Cloud Security
- Vulnerability management tools
- Collaborate with DevOps for secure System Administration (most Linux, less Windows, and macOS)
- Network Security (Firewalls, Open VPN/Meraki VPN, network equipment)
- Security operations center tools like AlienVault, Rapid7 (or Splunk or similar)
- Logging tools like AWS CloudTrail or Sumo Logic, Mode, AWS Athena
Security certifications:
- CISSP - Certified Information Systems Security Professional
- AWS Security Specialty
- Security+ - from CompTIA
We offer:
-
Culture of Relentless Performance: join an unstoppable technology development team with a 99% project success rate and more than 30% year-over-year revenue growth.
-
Competitive Pay and Benefits: enjoy a comprehensive compensation and benefits package, including health insurance, language courses, and a relocation program.
-
Work From Anywhere Culture: make the most of the flexibility that comes with remote work.
-
Growth Mindset: reap the benefits of a range of professional development opportunities, including certification programs, mentorship and talent investment programs, internal mobility and internship opportunities.
-
Global Impact: collaborate on impactful projects for top global clients and shape the future of industries.
-
Welcoming Multicultural Environment: be a part of a dynamic, global team and thrive in an inclusive and supportive work environment with open communication and regular team-building company social events.
-
Social Sustainability Values: join our sustainable business practices focused on five pillars, including IT education, community empowerment, fair operating practices, environmental sustainability, and gender equality.
* Miratech is an equal opportunity employer and does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity, or any other protected status under applicable law.
All your information will be kept confidential according to EEO guidelines.