Loading...
LeadFull-timeRustAWSGCPAzureKubernetesAIAPI
Salary Range
$30,600 - $41,400 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
A Staff Security Engineer will be a member of the GRC team working within the Information Security organization and across the business to advise, build, and operate security and compliance programs at scale. This role involves leading security efforts to acquire and maintain compliance certifications, designing solutions that enable security goals, and collaborating with business and engineering teams to ensure security while preserving velocity.
Key Responsibilities
- →Own the PCI-DSS program at Harness as the subject matter expert
- →Design, implement, and continuously monitor PCI-DSS controls, collaborating with engineering teams
- →Contribute precise and actionable guidance to ensure security and privacy by design
- →Lead and deliver internal and external audits, risk assessments, and annual compliance certifications
- →Execute core security capabilities such as policy and procedure development
- →Support customer trust initiatives by reviewing contracts and maintaining the customer trust portal
- →Continuously monitor and manage supply chain security and vendor risk management
- →Drive security and compliance across the business through empathetic partnership
- →Measure control and program effectiveness, recommending new strategies to manage risk
- →Articulate Harness’s security capabilities and controls to enterprise customers or auditors
- →Identify security gaps and develop plans to address them
Requirements
- ✓At least 5-8 years of relevant industry experience
- ✓Exposure to industry regulations, frameworks, and compliance certifications (ISO 27001, SOC 2, PCI, NIST, FedRAMP, SOX, HIPAA)
- ✓Previous experience in a cloud-native environment (AWS, GCP, or Azure)
- ✓Experience assessing and utilizing AI in a secure environment
- ✓Exposure to or experience with Kubernetes, SBOMs, SLSA, and/or DLP
- ✓Experience with GRC tools or building automation
- ✓Strong cybersecurity acumen and solid technical proficiency
- ✓Keen attention to detail and ability to handle ambiguous situations
- ✓Proactive, results-driven, and excellent collaborator and communicator
- ✓Bonus Points
- ✓Relevant security or technical certifications (ISO 27001 Lead Implementer or Lead Auditor, PCI QSA, CISA, CISSP, AWS/GCP Professional)
- ✓Familiarity with AWS or GCP console and best practices for configuration and management
- ✓Eagerness to learn and mentor junior colleagues
- ✓Desire to automate routine tasks
Free to sign up. Takes 30 seconds.
