Senior Security Engineer

Summary

Join Sonar's Information Security team and contribute to building secure, high-quality code. You will collaborate with engineering teams to ensure products and cloud platforms meet Sonar's security standards, investigate and resolve security issues, and implement new security tools and features. Daily tasks involve developing security initiatives, conducting security reviews, managing cloud networks, and investigating CVEs. Extensive experience with cloud architectures (AWS, GCP), CI/CD platforms, application security assessments, and threat modeling is required. Pen-testing experience and endpoint security knowledge are also essential. Sonar offers a dynamic culture, work-life balance with a flexible hybrid work policy, and opportunities for professional growth.

Requirements

• Extensive experience with Cloud architectures including AWS and GCP
• Extensive experience with CI/CD platforms
• Experience with application security assessment methods and reviews including authentication and authorization
• Experience with threat modeling using frameworks like STRIDE
• Pen-Testing experience
• CVE investigation and management
• End-point security such as CrowdStrike and CyberArk
• Cloud network and firewall management

Responsibilities

• Develop and deliver security initiatives through the Strategic Security Plan
• Procure, design, and implement new security tools and features
• Work with the engineering teams to design and implement security solutions for products
• Run internal and external security reviews and pen-testing campaigns
• Investigate and resolve security issues in products and internal systems
• Review engineering product architecture and solutions to ensure integration of security requirements
• Investigate and manage CVE and cloud platform configuration
• Manage and adjust cloud networks and firewalls

Preferred Qualifications

• Azure platform and Google Workspace experience are a plus
• You are a curious person by nature
• You are a friendly, enthusiastic, and an organized team player
• You actively share your knowledge and give and receive feedback, to improve the team and yourself
• Ability to clearly identify the problem to be solved and articulate it before working on the solutions
• You have experience working on cross-team projects across a global organization
• You are fluent in Written and spoken English

Benefits

• Our culture and mission set us apart
• We believe that great people make a great company
• We embrace work-life balance
• It is important to maintain a healthy work-life balance. This is why we have a flexible work policy that includes remote and in-office hybrid work (minimum three days a week in the office - Monday/Tuesday/Thursday)
• We have a growth mindset
• We love to learn and believe that continuous education is critical to our success. In an ever-changing industry, new skills are a must, and we're happy to help our team acquire them