Job Description

Position Description
Conga is looking for a Product Security Engineer who can support, enhance, and automate. This Product Security Engineer will be a part of the Engineering team and will require knowledge of Cloud Security Posture Management (CSPM).
Roles & Responsibilities:

• Monitor, triage, and resolve security alerts promptly and ensure that every alert is investigated and resolved quickly
• Adopt, implement, and enforce Cloud Security Posture Management (CSPM) standards and best practices
• Participate in security audits, pen testing, collect evidence
• Remediate vulnerability findings as per security SLAs (Service Level Agreements)
• Implement and maintain security controls and compliance polices to secure and protect workloads running in public clouds
• Security threat analysis, hunting, detection, and response
• Demonstrate creativity and out of the box thinking to continuously improve the organization's threat intelligence, security monitoring, detection, and response capabilities
• Evaluate existing security controls for efficacy, identify gaps, drive remediation and risk treatment processes across all of Conga products and services
• Assist with image / instance hardening and reduce the attack surface of various images and endpoints
• Continuously monitor/observability automation of security and compliance and improve measures
• Working with the team to take on projects which gather telemetry from many sources, identify risks from that telemetry, and remediate those risks and automate remediation
• Participate Security Incident Response activities, help to detect, respond, contain, eradicate, and recover from security incidents in a timely manner
• Must be able to work extended hours as needed including being available for off hours support
• Work with Engineering and IT teams to identify, analyze and remediate risks
• Willingness to dive-in supporting Cloud IaaS/PaaS/SaaS environments as a part of 24x7 global cloud platform management teams

Requirement:

• Bachelor’s degree in a relevant field of study preferred: Computer Science, Management Information Systems, etc., or equivalent experience and 1+ years of relevant Product Security experience

• Strong communication and team skills in a distributed global environment
• Strong analytical skills and passion to solve problems
• Implement security and compliance tools and technologies to improve security posture
• Public cloud platforms (AWS, Azure and/or IBM or GCP) management
• Risk management and compliance to meet compliance requirements
• Collaborate cross-domain with internal and external stakeholders at all levels of a company
• Demonstrate creativity and out of the box thinking to continuously improve the organization's threat intelligence, security monitoring, detection, and response capabilities
• Motivation and ability to grow talent by adopting new technologies while prioritizing empathy
• Use of automation, and orchestrating infrastructure (Terraform) changes across Government and Public clouds

Conga is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law. Reasonable accommodations will be made to meet the requirements of the Americans with Disabilities Act and will be provided as requested by candidates taking part in all aspects of the selection process.
All your information will be kept confidential according to EEO guidelines.