Plume Design, Inc

Senior Security Engineer

Seeking a Sr. Security Engineer with 5+ years of experience in security engineering. Must have expertise in secure software principles, threat modeling, pentesting, and public cloud architectures. Strong communication and problem-solving skills are essential.

<div class="jobs-box__html-content jobs-description-content__text t-14 t-normal
 jobs-description-content__text--stretch" id="job-details" tabindex="-1">
 <h2 class="text-heading-large">
 About the job
 </h2>

 <div class="mt4">
 
 Life at Plume At Plume, we believe that technology isn't about moving faster, it's about making life’s moments better. Which is why we’ve built the world's first, and only, open and hardware-independent service delivery platform for smart homes, small businesses, enterprises, and beyond. Our SaaS platform uses WiFi, advanced AI, and machine learning to create the future of connected spaces—and human experiences—at massive scale. We now deliver services to over 50 million locations globally and have managed over 2.5 billion devices on our platform. We’re expanding rapidly, pioneering a new category, and we achieved our Series F funding in just four years. Our customers include many of the world's largest Communications Service Providers (CSPs) who look to Plume to help them evolve their smart home offerings while gleaning insights from their own data. With a bias for action and a love for being trailblazers, the team at Plume embodies a combination of relentless curiosity and imaginative innovation. We challenge ourselves to think in ways that other companies don't, work to do what should be done (rather than what can), and if we can’t do it exceptionally well, we don’t do it. It’s how we've assembled a team of world-class builders, thinkers, and doers. And it’s how we’re reinventing what’s possible every day. Plume develops and deploys cloud based control planes with scale to manage tens of millions of customer homes through some of the world’s largest Internet Service Providers. Our cloud applications include WiFi network management and optimization, device access control, network provisioning, IoT security, and end customer user interaction through mobile apps. The Opportunity Plume is hiring a security engineer to join the security engineering team to help protect and drive the Plume mission. As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our platforms, and our reputation and brand. Finally, it is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success. As a Sr. Security Engineer, you will focus on the technologies that ensure our networks and systems are up to industry and Plume security standards. This role will partner with various application development and stakeholder groups across Plume to ensure that the technologies and systems we build in-house or purchase and deploy in-house are designed and maintained in a secure way that minimizes risk. What You Will Do <ul><li>Drive delivery of innovative security and privacy preserving solutions tightly integrated into our software development, data engineering and business intelligence lifecycle.</li><li>Build tools and processes which measure and assist engineering teams to create software with security and privacy by design principles </li><li>Develops security policies, procedures, and guidelines and recommends necessary changes to a given project team to ensure the company’s systems are fully compliant with all applicable regulatory requirements and privacy laws.</li><li>Serving as an advisor to engineering and development teams in security best practices and design.</li><li>Leads security-related projects from inception to successful completion and is capable of effectively coaching technology staff on appropriate security protocols and needs as they implement new technology into the organization.</li><li>Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.</li><li>Serve as the subject matter expert (SME) for security solutions, maintaining documentation on them and advising others on their underlying technologies and operation.</li><li>Work with security and IT teams to identify threats and problem areas and create stronger and safer software and application deployments across Plume, measuring decreased risk and prevalence of issues. </li></ul>
Who You Are <ul><li>Bachelor's degree in Information Security, Computer Science or related field or equivalent work experience</li><li>5+ years of professional experience in security engineering with a education in security engineering, cyber security, computer science, engineering, math, or other STEM discipline; </li><li>You know industry best practices for security and privacy by design such as Secure software principles, threat modeling and pentesting.</li><li>Knowledge of public cloud architectures, such as AWS, cryptography and cryptographic best practices.</li><li>Experience with software coding in Python, Shell, Go, Javascript and/or ability to understand code/APIs for SaaS products.</li><li>Strong communication, written, presentation and interpersonal skills</li><li>Proven ability to work unsupervised, exercise leadership, and influence change.</li><li>You operate effectively across teams and disciplines even in highly ambiguous situations with a rack record of getting things done quickly and with quality</li><li>Experience with security framework policies, processes and controls; such as: ISO27001, ISO27701, SOC2, NIST CSF, CIS, is a plus</li><li>Certifications such as CISSP, AWS, CIPP, CIPPT etc is a plus </li></ul>
About Plume As the creator of the only open, hardware-independent, cloud-controlled experience platform for CSPs and their subscribers, Plume partners with over 350 CSP customers, including some of the world’s largest such as Comcast, Charter, Liberty Global, and J:COM. Using OpenSync, the most widely supported open-source, silicon-to-cloud framework for smart spaces, Plume’s software-defined network allows CSPs to decouple their service offerings from hardware and rapidly curate and deliver new services over a multi-vendor, open-platform architecture. Backed by investors such as Insight Partners and SoftBank Vision Fund 2, Plume is now valued at $2.6B, having added over $500M in funding in 2021 alone. Plume is an equal opportunity workplace that maintains a continuing policy of nondiscrimination in all employment practices and decisions, ensuring equal employment opportunities for all qualified individuals without regard to race, color, creed, religion, sex, national origin, age, physical or mental disability, sexual orientation, gender identity, marital status, pregnancy, childbirth or related individual conditions, medical conditions (as defined by state law), military or veteran status, or any other characteristic protected by federal, state or local law.
 
 </div>
 </div>