Senior Cyber Security Engineer (AWS)

About the role

Goodnotes, part of Good Systems, is looking for a Senior Security Engineer to join a distributed team across Europe and Asia. You will work alongside iOS engineers, backend engineers, QAs and designers to improve real-time collaboration features used by millions of users, and you will own the security of the company's cloud-based platforms and services on AWS, as well as contribute to the overall security strategy.

Key responsibilities

• Design, implement and maintain security architectures and strategies for AWS cloud environments
• Monitor and analyse security alerts, logs and reports to detect and respond to potential threats
• Lead incident response and perform root cause analysis to prevent future incidents
• Integrate security into application development and deployment with cross-functional teams
• Work with the legal team to develop and enforce policies for secure cloud operations
• Advise internal teams on AWS security services and features
• Stay up to date with emerging threats, technologies and trends
• Set up and run bounty programs

Required profile

• 5+ years of experience in a security engineering role focused on AWS
• Ability to lead new projects with a high degree of autonomy
• Excellent problem-solving, communication and collaboration skills
• Candidates with less experience may be considered for a Security Engineer title; learning and development is supported

Required skills

• Knowledge of security standards and frameworks such as SOC2 and ISO 27001
• IaC for AWS security services: IAM, Security Groups, VPC, KMS, CloudTrail, GuardDuty, AWS Control Tower
• Bonus: hands-on experience reporting CVEs, security certifications (e.g. AWS Security Specialist), and experience with real-time collaborative apps

What we offer

• Customised growth and wellness budgets (headphones, training, personal development, wellness)
• Sponsored visits to office locations and annual company-wide offsites
• Premium medical insurance for you and a dependent
• Hybrid model: 4 days in the office, 18 remote days per year

The process includes a talent intro call, a take-home challenge, a technical interview, onsite interviews and an AI literacy session. Background checks are required.