"RainFocus one of the most innovative software companies is in search of an exceptional Cybersecurity Engineer . About RainFocus RainFocus cares about its employees customers and the world in which we live. Our rapidly growing team serves Fortune 500 companies like Adobe Cisco IBM Oracle VMware and others to prepare and execute in-person virtual and hybrid events across the world. Those events are delivered through our industry-disrupting software platform with groundbreaking business intelligence to elevate the attendee experience streamline event operations and accelerate marketing results. We are well-funded growing fast and building a company that is changing the market — it will be challenging fun and exciting. About The Role As a Security Engineer you will play a critical role in safeguarding our organization's digital assets infrastructure and application ecosystem. This is a mid-level autonomous role (not entry-level) where you will bridge the gap between IT operations software development and risk management. You won't just be reviewing logs settings and configs you will be actively replicating vulnerabilities collaborating with developers on secure architecture managing our bug bounty program and keeping our security tool stack running smoothly. Core Responsibilities Vulnerability & Application Security Management Own the vulnerability management program end-to-end oversee continuous vulnerability scanning (Tenable) and software composition analysis/code dependencies (Sonarqube) drive remediation across teams and replicate and validate discovered vulnerabilities using tools like Burp Suite and Kali Linux. Crowdsourced Security & Threat Intel Manage and triage our crowdsourced bug bounty program (BugCrowd) and monitor our external security posture rating (Bitsight). Secure Development Collaboration Act as the security voice in developer architecture meetings. Partner with engineering teams to review code dependencies threat-model new features and ensure secure coding practices. Risk & Change Management Own and conduct system impact analyses for proposed changes represent security on the Change Control Board (CCB) and lead threat modeling sessions for new systems features and infrastructure changes. Incident Management & Operations Triage and document security incidents within OneTrust and Jira. Collaborate with DevOps to ensure security tools are properly deployed across AWS environments and endpoint configurations. Endpoint & Tool Oversight Maintain a ""read-only/audit"" oversight of our endpoint detection MDM and email security tools (Sophos JAMF BetterCloud) to ensure compliance and active alerting. Security Awareness & Culture Administer the security awareness learning modules (RF Academy) and lead internal initiatives to keep security top-of-mind for all employees. Required Skills & Qualifications Citizenship All candidates must be a US citizen. Experience 3–5 years of dedicated experience in a technical cybersecurity role (e.g. Security Engineer AppSec Engineer or Senior Security Analyst etc.). Application Security Strong familiarity with the OWASP Top 10 web application security testing and reviewing secure code dependencies (SCA). Vulnerability Assessment Proven experience running enterprise vulnerability scanners interpreting results and driving remediation across cross-functional teams. Cloud & Infrastructure Foundational knowledge of cloud environments (specifically AWS) and securing cloud-native applications. Communication Excellent collaboration skills. You must be able to sit down with software developers understand their sprint goals and help them fix security bugs without breaking their workflow. Preferred Experience & Tool Stack Direct experience with our specific stack is a massive plus AppSec/PenTesting Burp Suite Kali Linux BugCrowd Sonarqube SecOps & Vulnerability Tenable Bitsight OneTrust IT & Endpoint Ecosystem Jira AWS Sophos JAMF PDQ BetterCloud Certifications CompTIA Security+ CEH GIAC or progress toward a CISSP or other relevant certifications Automation Basic scripting skills (Python PowerShell or Bash) to automate repetitive security tasks or log analysis. Security Frameworks Experience with maintaining compliance with PCI-DSS ISO 27001 and SOC 2 frameworks. Artificial Intelligence Experience utilizing AI to improve productivity and efficiency as well as experience reviewing AI tools integrations and features. Success Measures Proactive Remediation Decreased time-to-remediation for vulnerabilities identified by Tenable and BugCrowd. Seamless Dev Integration Active constructive participation in developer sprint/architecture cycles resulting in fewer security defects reaching production. Incident Readiness Efficient tracking documentation and resolution of incidents within OneTrust Success Measures Reduced number of security incidents and vulnerabilities. Timely and effective incident response and resolution. Successful implementation and adherence to security policies and procedures. Positive feedback from internal teams on security awareness and training programs. Successful completion of security audits and compliance assessments. Why work at RainFocus? At RainFocus we delight millions of attendees at large-scale events by delivering better insights experiences and marketing. We were able to pivot our product and services offering in 2020 to continue growing and serving new clients and events. As a member of the RainFocus team you will have the opportunity to experience first-hand the impact of our platform at events around the world. Additionally RainFocus offers competitive salaries competitive benefits 401k generous PTO and countless other team building activities. What are you waiting for? Apply today! We need more talented hard-working fun-loving team members just like yourself!"