Job Details

In a world where many social apps measure their success by time spent online, Raya is a technology company focused on providing utility. Our iOS only app is a tool for discovery of and access to exciting people, events, opportunities and recommendations globally. We believe that by marrying great software with a membership based community built around core values of trust, creativity, and reciprocity, we can provide solutions that have heretofore been impossible.

A Security Engineer at Raya is a skilled professional responsible for ensuring the protection of our organization's information systems and networks from potential threats. We are looking for an individual who is adept at analyzing, designing, and implementing robust security measures to safeguard sensitive data and assets. They will also stay up-to-date with the latest security trends and continuously assess and mitigate risks to maintain the organization's security posture.

What You'll Do :

1. Backend Security Ownership: Ensure the security of our signup and SMS flows. Implement and review rate limiting for optimal security. Conduct code audits to identify and rectify potential security vulnerabilities.
2. Third-Party Package Security Management: Monitor security vulnerabilities in our packages and implement fixes. Evaluate and maintain the security of our own packages and repositories.
3. Vendor Security Assessment: Assess and ensure the security of our setup with vendors like Datadog and Mixpanel.
4. VPN and Managed Devices Security: Implement and maintain security measures for our VPN and managed devices.
5. Credential Management: Oversee the secure issuance of credentials for applications and operators. Ensure the proper documentation and security of the credential management process.
6. Employee Communication Security: Restrict and manage employee email access to prevent phishing attacks.
7. Threat Research and Analysis: Stay informed about new attacks and threat models related to our code and infrastructure. Advocate for appropriate measures to address potential exploits in a prioritized manner.
8. Monitoring Systems: Design and develop monitoring and response systems, implement dependency checks, and work on security scanning tools in the CI/CD pipeline.

Experience You Have :

1. 10+ YOE minimum.
2. Ample experience doing the below at different companies.
3. Coding/Software Engineer with a keen interest in security.
4. Network Security.
5. Penetration Testing.
6. Knowledge of bash scripting, Linux, and operating systems.
7. Familiarity with DevOps and cloud technologies (AWS, Kubernetes, Docker) preferred.
8. Experience with CI/CD like Jenkins and GitHub actions.
9. Experience with security tools like Burp Suite, Kali Linux, Metasploit, Nmap.
10. Experience with SemGrep, Nuclei, Trufflehog, and Checkov.
11. Up-to-date knowledge of security trends and exploits in the industry.
12. Self-starter and effective communicator.