Infosec Engineer

The Senior Information / Cybersecurity Analyst will report to the Dev-Sec-Ops manager and take a lead role in developing systems, policies, and procedures to ensure REsurety’s advanced research and financial trading platforms are secure against all forms of cyberattacks.

As a Staff Infosec Engineer, your responsibilities include protecting REsurety’s digital data and computer systems from threats such as data breaches and cyberattacks, monitoring systems, and identifying vulnerabilities.

In this role, you will work with the Dev Ops Cloud Services and the Architecture Teams to ensure the cloud-based architectural design by implementing security measures like firewalls, code scanning tools, and enterprise monitoring solutions. Also, investigate internal and external breaches and security incidents.

• Implements and maintains enterprise security protocols, tools, and systems to monitor for risk management and vulnerabilities.
• Documents and Maintains Incident Response Plans (IRP) and manages issues from discovery through closure.
• Investigates breaches, conducts root cause analysis, and performs digital forensics.
• Develop frameworks to meet regulatory standards, including SOC 2, ISO 27001, and NIST.
• Evaluates vendor security and manages supply chain risk.
• Coordinates with the technical leadership team and manages all client communication of Security Compliance questionnaires.
• Implements a process to manage a knowledge base of info, cyber, and data security-related questions to provide consistent, qualified, and detailed responses.
• Manage information and cybersecurity training and awareness programs for all employees.
• Software Engineering and Development e.g. C++, Python, Java, Java script
• Data management, storage models, and access patterns.

• Bachelor's degree in Computer Science, Information Security, or a related field; a Master's degree is a plus.
• 5 years of experience in a senior cybersecurity role, with a proven track record of building and managing security programs.
• Demonstrated experience in managing and responding to customer-facing security questionnaires and audits, and effectively communicating security and compliance controls to customers.
• Strong technical background in cloud security (AWS, Azure, or GCP), application security, and network security.
• Strategic thinker with a proactive and results-oriented approach to problem-solving.

• Experience helping organizations achieve SOC 2 Type 1 and/or Type 2 attestation.
• Familiarity with tools such as Terraform, Atlassian, Git Hub, Jenkins, etc.
• Hands-on experience in secure code review, threat modeling, and cloud security automation.
• Certifications such as CISSP, CISM, Security+, or AWS Security Specialty are a plus.

• Our organization works on a hybrid model. We are in the office on Mondays, Tuesdays, and Thursdays at our downtown Boston building, and remote work is optional on Wednesdays and Fridays.

• The base compensation range for this position is $153,850 to $208,150. Actual starting pay is determined by a number of factors, including relevant skills, qualifications, and experience. This range does not include annual bonus, equity-based incentives, and benefits.

Learn more about working at REsurety and our benefits information on our Careers page.

REsurety is the leading provider of data, software, and services to the clean energy economy and operates the only transactional marketplace for clean power. Trusted by the industry’s leading buyers, sellers, and investors, REsurety’s proprietary data models, powerful technology platforms, and deep domain expertise empower confident, impactful decision-making and efficient, effective portfolio management.

We are a small team with a big impact! Our culture is open and collaborative. We expect excellence from our team members and reward it with high ownership and flexibility. If you’re a high-achiever with a passion for clean energy, we want to hear from you.

At REsurety, we value the skills of execution, creativity & ownership, commercial focus, and…