Cloud Security Engineer

Job Description

The Opportunity:

Shutterstock is looking to hire a skilled Cloud Security Engineer (Detection & Response) to be part of our Cybersecurity Operations & Incident Management team. As a Cloud Security Engineer on the team, you will collaborate with other security and infrastructure teams on identifying and remediating suspicious activities in our environment while improving visibility/governance and implementing AWS security best practices. The ideal candidate will possess a strong background in security engineering and automation to apply this experience in the cloud.

Responsibilities of this role include, but are not limited to, the following activities:

• Identify AWS Security gaps and implement AWS security best practices for our cloud environment (Security Groups, VPC Design, S3 Buckets, IAM Roles, etc.)
• Work closely with Security and Infrastructure groups to create, test and deploy threat detection analytics for our environment.
• Collaborate with engineering and product teams to help define security requirements and architectures.
• Build, improve and automate operational tooling and workflows using a reliable software language such as Python
• Create and maintain comprehensive documentation related to AWS Security and Incident Response
• Review alerts and data from systems/networks and respond accordingly, including documentation and escalation
• Develop tactical response procedures for security incidents
• Perform security monitoring, security event triage, and incident response; coordinate with other team members and management to document and report incidents
• Due to the necessary technical support duties of this position in a 24/7 operation, candidate will be part of rotating shifts and will be required to work periodic weekends and/or nights/evenings

Skills and Experience:

• 5+ years of experience in evaluating technical designs and functional requirements in order to determine weaknesses in security. The candidate must be able to provide constructive feedback and achievable recommendations.
• Required industry security certification (e.g., CISSP, CISM, CISA, CCSP, etc.)
• Operational experience with network security appliances with a clear understanding of the architecture behind secure networks, DMZ’s, NAT’s, rule placement, VPN setup, and system maintenance
• Hands-on experience with Cloud technologies and cloud networking constructs – AWS Preferred (EC2, ELB, RDS, Route53, CloudFront, S3)
• Experience with attacks and mitigation methods, working in two or more of the following: Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks
• Strong organizational and project management skills
• Proven ability to develop effective partnerships with senior management and peer organizations. Must be able to explain technical concepts and problems to nontechnical senior executives effectively
• Strong written and verbal communication skills. Strong interpersonal skills, resourceful, responsive with strong follow through

We are one team collectively focused on creating an unrivaled experience for our Customers and Contributors. Our principles represent the mindset of the employee who will thrive at Shutterstock. If you are passionate about what you do, and want to become part of a cutting-edge technology company building industry leading products, please apply.

About Shutterstock:

Shutterstock, Inc. (NYSE: SSTK ), directly and through its group subsidiaries, is a leading global provider of high-quality licensed photographs , vectors , illustrations , videos and music to businesses, marketing agencies and media organizations around the world. Working with its growing community of over 1 million contributors, Shutterstock adds hundreds of thousands of images each week, and currently has more than 330 million images and more than 18 million video clips available.

Headquartered in New York City, Shutterstock has offices around the world and customers in more than 150 countries. The company’s brands also include Bigstock , a value-oriented stock media offering; Shutterstock Custom, a custom content creation platform ; Offset, a high-end image collection ; PremiumBeat, a curated royalty-free music library; and Shutterstock Editorial, a premier source of editorial images for the world's media.

For more information, please visit www.shutterstock.com and follow Shutterstock on Twitter and on Facebook .

Equal Opportunity Employer, M/F/D/V