Senior Security Engineer-DevSec Ops

Company: Happy Money
Location: Tustin
Posted on: February 19, 2021

Job Description:

Happy Money-- is the fintech of the future, delivering digitally-native financial tools and services for human happiness--- through its purpose-driven marketplace between mission-aligned capital and consumers. Happy Money is creating an alternative to the "Sad Money---" system with a connected ecosystem of consumer financial products designed to help borrowers become savers. Happy Money. A Happier Future.---
Backed by leading investors including Anthemis Group, Tencent Holdings and CMFG Ventures, Happy Money has helped over 80,000 members pay off nearly $1.5 billion in credit card debt. Founded in 2009, Happy Money has over 270 employees and is based in Tustin, California.
ABOUT THE ROLEWe are hiring for a brand new DevSecOps Engineer position to join our small but mighty team! This will be an individual contributor role that will report to our Information Security Manager. There is one opening currently for a mid to senior level.Here at Happy Money, we live by our core values of Love, Trust, and Hustle and welcome all. Love is shown in how we develop meaningful relationships with everyone we interact with; whether it's a member or your manager. Trust is shown through how we empower each other to come to work as our true selves and embrace our differences. Hustle is shown through how we fail fast and learn from our mistakes. No one is perfect, we're all human; if this job description doesn't exactly match your background, we urge you to apply anyway!
ABOUT YOU

• 4-7 years of experience in DevOps within AWS.
• At least 3 years of experience in DevSecOps and/or Securing AWS Architecture.
• Ability to write Terraform script to provide updates within the AWS environment.
• Proficient in AD/Okta/AWS Security Groups/AWS IAM/AMI/EC2/S3/EFS/Application Load Balancer/AWS DB-s/Lambda/KMS/AWS Parameter Store/AWS Secrets Manager.
• Good understanding of Network & Firewalls.
• Good understanding of AWS GuardDuty and AWS Inspector, Qualys VM/Tenable VM.
• Required to conduct POC for AWS WAF, and later implement and manage AWS WAF. Good understanding of the OWASP Top10. Ability to set up and manage AWS WAF criteria via Terraform.
• Understanding of the AWS Logging & Monitoring via CloudTrail & CloudWatch. Ability to gather SEIM requirements, including security requirements. Required to conduct POC for CloudTrail, and later implement and maintain AWS CloudTrail. Ability to set up and manage AWS CloudTrail criteria via Terraform.
• Ability to get quickly up to speed with other logging/scanning platforms, such as AlienVolt, DataDog, Nessus and others.
  BONUS POINTS
  • Ability to implement and manage security tools, like Varonis, Thycotic Secret Server, Crowdstrike, and/or others.
  • Create Information Security Requirements for DevSecOps projects.

Keywords: Happy Money, Tustin , Senior Security Engineer-DevSec Ops, Engineering , Tustin, California