Security Engineer

📋 Description

• • As an Information Security Engineer at Forward Financing, you will be at the forefront of protecting our organization's digital assets and ensuring the integrity, confidentiality, and availability of our critical systems. This role is pivotal in architecting, implementing, and maintaining robust security solutions that safeguard our rapidly growing financial technology infrastructure. You will be instrumental in designing proactive security measures, meticulously resolving complex vulnerabilities, and driving continuous improvement across our entire security posture. Your expertise will directly contribute to our mission of unlocking capital for small businesses across America by ensuring a secure and trustworthy environment for our operations and customers.
• • You will be responsible for building and maintaining sophisticated security automation workflows. This involves seamlessly integrating detection, triage, and response mechanisms across a suite of cutting-edge tools such as CrowdStrike, Security Orchestration, Automation, and Response (SOAR) platforms, and Slack. The primary goal of these automations is to significantly reduce the time it takes for our security analysts to detect and respond to potential threats, thereby enhancing our overall incident response efficiency and effectiveness.
• • A key aspect of this role involves developing and maintaining our security infrastructure using infrastructure-as-code (IaC) principles. You will leverage tools like Terraform or Terragrunt to define, provision, and manage our security tooling and configurations in a consistent, repeatable, and version-controlled manner. This approach ensures that our security environment is not only robust but also auditable and easily reproducible, which is crucial for maintaining a strong security posture in a dynamic cloud environment.
• • You will actively participate in our incident response process, serving as a critical member of the team that addresses security breaches and cyber threats. This includes being part of an on-call rotation to ensure 24/7 coverage for critical security events. Your ability to remain calm under pressure, analyze complex situations, and execute response plans effectively will be vital in mitigating potential damage and restoring normal operations swiftly.
• • Measuring and understanding the effectiveness of our security operations is paramount. You will be tasked with instrumenting and tracking key security metrics, such as Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). By building comprehensive dashboards and reports, you will provide clear visibility into our program's performance, demonstrating the return on investment (ROI) of our security initiatives and identifying areas for further optimization.
• • Embracing innovation, you will evaluate and integrate emerging technologies, particularly AI-augmented security tools and workflows. This forward-thinking approach aims to enhance our detection capabilities, improve threat intelligence analysis, and streamline response actions, keeping us ahead of evolving cyber threats.
• • You will collaborate closely with engineering, operations, and other teams to embed security best practices throughout the software development lifecycle and operational processes. This includes conducting security reviews, providing guidance on secure coding practices, and ensuring that security is a fundamental consideration from design to deployment.
• • Your role will involve staying abreast of the latest security threats, vulnerabilities, and industry trends. You will proactively research and recommend new security technologies and strategies to enhance our defenses and maintain a leading-edge security program.
• • You will contribute to the development and maintenance of security policies, standards, and procedures, ensuring compliance with relevant regulations and industry best practices.
• • This position offers a unique opportunity to work within a small, agile, and highly motivated security team. You will have the autonomy and responsibility to own problems end-to-end, from initial identification and analysis through to resolution and continuous improvement. This environment fosters rapid learning, significant impact, and direct contribution to the company's success and security mission.
• • As a remote-first company, Forward Financing values flexibility and impact. This role allows you to contribute meaningfully to our security efforts from the Dominican Republic, with the option to utilize our office spaces for collaboration when desired. Your work will directly support our mission to empower small businesses through secure and reliable financial technology.