Alpaca
Staff Security Engineer
Job Summary
The role involves leading security incident management, threat detection, and collaborative security strategy development. The candidate will develop and maintain incident response procedures, implement security automation, and enhance security measures in cloud environments. It requires 6-8 years of experience in security operations or engineering, with strong skills in security tools, cloud security, and threat hunting. The position also involves conducting vulnerability assessments, supporting compliance efforts, and contributing to security research, all within a remote, distributed team.
Required Skills
Benefits
Job Description
Your Role:
We are seeking an experienced Staff Security Engineer who can help expand our Security efforts and play a critical role in safeguarding Alpaca’s systems, data, and client assets from evolving cyber threats to ensure the security and integrity of our Firm.
The role requires a deep understanding of Cybersecurity principles, incident response, cloud security, offensive security, and proactive threat detection with a proven track record of managing security risks and cross functional collaboration. The Security Team is 100% distributed and remote. This role will be reporting directly to the CISO.
Things You Get To Do:
- Lead and triage security events including potential security incidents, insider threats, malware infections, unauthorized access, fraud, and data exfiltration events
- Conduct thorough analyses of events, assess impact, and implement corrective actions by collaborating with cross-functional teams to prioritize and remediate issues as necessary
- Develop and maintain security incident response playbooks and automate security workflows to improve efficiency and effectiveness
- Conduct Threat Hunting activities to identify potential issues and implement strategies for proactive threat detection
- Manage and optimize security tools and technologies, such as SIEM, SOAR, Container Orchestration like Kubernetes, Docker / Docker Swarm and other relevant solutions
- Enhance the security of our CI/CD pipeline by integrating security measures into GitOps and focus on brainstorming, designing, building, deploying, and managing cloud-native security
- Collaborate with Product and Engineering to ensure secure design and implementation of systems and applications
- Lead and assist with vulnerability management, penetration testing, and red teaming activities, including managing our bug bounty program
- Foster strong cross-functional relationships with IT, Engineering, Compliance, and other stakeholders to ensure alignment and effective security practices
- Assist with compliance audits and assessments as necessary
- Conduct security research and contribute to the development of new security tools and techniques.
Who You Are (Must-Haves):
- Excited about Alpaca’s mission and what we’re building
- 6-8 years of mixed experience in a security operations, security engineering, product security, and DevSecOps
- Experience with implementing and maintaining SIEM/SOAR and automation solutions, and other security tools
- Experience with cloud-centric environments and cybersecurity capabilities, including a strong understanding of Kubernetes security concepts
- Strong analytical and problem-solving skills
- Excellent communication skills and committed to work collaboratively across the Firm
- Available for on-call rotations and after-hour responses as needed
Who You Might Be (Nice-to-Haves):
- Bachelor’s degree in Information Technology or a related field
- Security related certifications such as CISSP, GIAC, OSCP, CRTO, K8s is a plus
- Experience in securing and monitoring APIs
- Understanding of financial and privacy regulations
- Experience in the financial services industry
- Business acumen to be able to balance tradeoffs between stakeholders and technology feasibility and budget constraints
How We Take Care of You:
- Competitive Salary & Stock Options
- Health Benefits
- New Hire Home-Office Setup: One-time USD $500
- Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.
Alpaca
Alpaca's easy to use APIs allow developers and businesses to trade algorithms, build apps and embed investing into their services.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.