Apply on Employer Site

The Trevor Project · 3 hours ago

Security Engineer

United States

Full-time

Remote

Mid, Senior Level

$100K/yr - $140K/yr

5+ years exp

The Trevor Project is the leading suicide prevention and crisis intervention organization for LGBTQ+ young people. The Security Engineer role will oversee the security of the organization's systems and data, contributing to the Information Security Program and ensuring compliance with various security frameworks.

LGBTNon ProfitWellness

No H1B

Responsibilities

Monitor cloud based systems for security issues

Ensure the secure handling and protection of highly confidential and sensitive data across IT systems and infrastructure

Investigate security breaches and other cybersecurity incidents, identify and implement remediations, and report on the findings

Deploy security tools and platforms to protect systems and information infrastructure, including (but not limited to) SEIM, Security Awareness Training, Vulnerability Monitoring, and Automated Detection and Response tools

Work with security vendors to perform tests and uncover network vulnerabilities, and to determine and implement appropriate remediations

Stay current on IT security trends and news

Develop company-wide best practices for IT security

From ground zero, research, plan, and implement policies and processes that will achieve common Cybersecurity compliances, (SOC 2 type I/II, ISO27001, CCPA, Etc)

Evaluate potential additions to the organizational software portfolio for security risk and mitigation

Evaluate proposed projects, changes, or data use cases for security risk and mitigation

Demonstrate fair, ethical, and equitable business practices

Handle sensitive and confidential matters with the utmost discretion and integrity

Learn eagerly, share knowledge appropriately, and improve continuously

Demonstrate successful planning and problem-solving skills, including multitasking and working well within tight timelines

Work, communicate, and collaborate effectively with others

Demonstrate attention to detail and accuracy in all work

Demonstrate a commitment to fostering and maintaining an environment of belonging

Other relevant duties and responsibilities as assigned

Qualification

SOC 2 complianceISO27001 complianceData governanceAutomated threat detectionVulnerability assessmentSecurity audit processBusiness continuity planningSecurity Awareness TrainingThreat intelligenceAsset managementData managementEnglish proficiency

Required

5 or more years of combined education, work, and/or certification experience with demonstrated expertise in Information Security planning, implementation, and maintenance

Proficiency in implementing SOC 2/ISO27001, or other security compliance frameworks

Proficiency in developing and maintaining technical processes for data governance, retention, and deletion in a cloud environment (GCP/AWS/AZURE)

Proficiency in Security Awareness Training Program Management

Proficiency in Automated Threat Detection, Response, and Remediation Programs

Proficiency in Security Audit and Investigation process

Proficiency in Asset Management Lifecycle

Proficiency in Data Management Lifecycle

Proficiency in Vulnerability Assessment and Management

Proficiency in Threat Intelligence and Management

Proficiency in Business Continuity and Disaster Recovery

Proficiency in spoken and written English

Benefits

Comprehensive health coverage, including plans that support various gender affirmation care needs

Mental health resources, with access to virtual care and a variety of in and out of network options for support

403(b) retirement plan with a 3% employer match, vesting over three years

Generous paid time off and company holidays to rest and recharge

Employee Assistance Program (EAP) offering confidential emotional support, work-life solutions, financial and legal guidance, and online resources

Remote work flexibility from anywhere in the continental U.S., Alaska, or Hawaii- with provided technology, a home office setup reimbursement, and a monthly internet reimbursement