3 days ago
Poland (city not specified) +2 moreMid Level
Responsibilities
- Drive security-first development practices and educate engineers on secure coding.
- Perform vulnerability management and internal penetration testing for applications.
- Build and maintain SAST, DAST, dependency-scanning, and secret-scanning automation in the CI/CD pipeline.
- Own Okta security policies, privileged access, integrated-application audits, access reviews, and secure access requests.
- Triage, contain, investigate, and document security incidents, including phishing reports and evidence for Legal and HR.
- Process logs, build detections and automated playbooks, and develop threat-hunting capabilities.
- Secure Google Workspace, SSO/SAML integrations, OAuth applications, cloud environments, and endpoint-management baselines.
- Support SOC 2 Type II, GDPR, and ISO 27001 compliance, penetration tests, vendor assessments, risk management, and customer security questionnaires.
- Use AI tools for investigations, log analysis, detection writing, automation, and compliance work.
- Run security communications, phishing simulations, and tabletop exercises.
Requirements
- At least 3 years of experience in security engineering, security operations, or a similar role.
- Hands-on experience with incident response and log analysis.
- Strong IAM skills, including Okta or a similar identity provider, SSO/SAML, and MFA.
- Experience securing cloud and SaaS environments such as Google Workspace, GCP, or AWS.
- Experience with a SIEM and writing detection rules.
- Python or similar scripting skills and comfort working with APIs.
- Working knowledge of SOC 2 or ISO 27001.
- Hands-on daily use of AI tools such as LLM assistants or coding agents.
- Fluency in English and the ability to advance security work across teams.
- Preferred experience with Vanta, Datadog, Snowflake, GitLab, or threat hunting.
Benefits
- Opportunity to build a security function and new detection engineering, automated playbook, and threat-hunting capabilities.
- Broad exposure to identity, incident response, cloud, compliance, awareness, and security operations.
- Opportunity to use and help shape safe, effective AI-assisted security practices.
- The company operates across the US, Canada, the UK, and Europe with 24/7 fulfillment operations.
Tech Stack
Categories
About ShipMonk
ShipMonk provides technology-driven third‑party logistics for ecommerce brands, combining order, inventory, and warehouse management software with a network of owned fulfillment centers. Merchants use ShipMonk to store goods, pick/pack, and ship DTC, retail, and B2B orders via integrations with major ecommerce platforms and carriers. Founded in 2014 and headquartered in Fort Lauderdale, Florida, the privately held company operates facilities across the U.S., Canada, the U.K., and Europe.