Principal SecDevOps Engineer

Summary

Join Procore's journey to revolutionize the construction industry as a Principal Security Engineer, applying suitable design patterns to manage customer data privacy and security.

Requirements

• BS degree in Computer Science, a similar technical field of study, or equivalent practical experience is required
• 8+ years of experience in Software Engineering with at least 5 years of experience building security products and internal security tools
• Experience with conducting threat assessments and building threat models
• Differential Privacy techniques as they apply to access to sensitive data, anonymization and sharing
• Thorough understanding of vulnerability classes (OWASP), how they can be exploited
• Knowledge of cryptography, including symmetric and asymmetric ciphers, hash functions, PKI, and certificates. Application of cryptography to software engineering problems, such as secrets management, authentication, and data masking, and tokenization
• Understanding of open standards such as OAuth2, OIDC, SAML, and TLS
• Familiarity of data privacy laws such as GDPR and CCPA and related data security requirements

Responsibilities

• Apply suitable design patterns to manage the privacy and security of customer data within our production environment
• Understand the security and general architectural vision of Procore 2.0
• Be a technical security mentor for the Security Engineering team, as well as an influencer of the Cloud Runtime Engineering team
• Work closely with Security Architecture, Product, Cloud Runtime Engineering, and Legal
• Work across Terraform, Ruby on Rails, Apache, Nginx, Snowflake, data Analytics, PostgreSQL, AWS tech stacks

Benefits

Base Pay Range $185,800 - $255,475. Eligible for Bonus Incentive Compensation