Senior Information Security Engineer
Job Summary
Job Description
The Senior Information Security Engineer will design, implement, administer, and monitor security measures to protect WHOOP systems, networks, and data. This role requires continuous learning to adapt to evolving security threats. Responsibilities include leading security initiatives, designing and improving security controls, leading security assessments, driving incident response, overseeing IAM architecture, securing IaaS/PaaS and SaaS applications, guiding the deployment of security tools, leading vulnerability remediation, mentoring team members, promoting security awareness, and tracking emerging threats. The role is based in Boston, Massachusetts, and requires relocation if necessary.
Must have:
- 6+ years of experience in Information Security or a related role.
- Experience implementing and managing advanced security technologies.
- Understanding of modern cloud security architecture (AWS, Azure, GCP).
- Demonstrated leadership in security incident response.
- Excellent communication and interpersonal skills.
- Strong project management skills and the ability to drive initiatives.
- Experience mentoring junior engineers.
- Solid documentation and operational tracking skills.
11 skills required
Job Details
At WHOOP, we're on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives.
WHOOP is seeking a Senior Information Security Engineer to join our team, reporting to our Information Security Manager. In this role you will design, implement, administer, and monitor security measures to protect WHOOP systems, networks, and data from security threats. Success in this role requires continuous learning and adaptation to guard against ever-evolving security threats.
This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office.
RESPONSIBILITIES:
- Serve as a technical lead and subject matter expert on key security initiatives and cross-functional projects, collaborating with IT, GRC, Software, and other stakeholders to reduce risk across the organization.
- Design, implement, and continuously improve security controls, automation, and monitoring solutions to protect WHOOP systems, infrastructure, and data at scale.
- Lead and execute complex security assessments, vulnerability testing, and risk analysis efforts, providing recommendations and driving remediation plans.
- Drive incident response efforts, including investigation, coordination, containment, remediation, root cause analysis, and post-incident reviews.
- Oversee and enhance IAM architecture and policies, including SSO, SCIM, MFA, RBAC, and user lifecycle management.
- Provide technical leadership in securing IaaS/PaaS and SaaS applications by defining best practices, conducting reviews, and hardening security controls.
- Guide the deployment, integration, and tuning of security tools such as CASB, EDR, DLP, SIEM, CNAPP, and MDM solutions to maximize effectiveness and coverage.
- Lead efforts to identify, triage, prioritize, and support the remediation of vulnerabilities across cloud environments, infrastructure, and SaaS platforms.
- Lead and mentor team members by providing guidance on security best practices, project execution, work review, and knowledge sharing.
- Promote a culture of security-first thinking across engineering, IT, and product teams by driving awareness, training, and secure development practices.
- Track emerging threats, technologies, and regulatory changes; propose and drive forward-looking security strategies to ensure WHOOP maintains a resilient security posture.
- Continuously assess and improve security operations, workflows, and tooling to meet evolving business and security requirements.
- Participate in and help improve the on-call rotation to support critical security incidents, offering guidance and escalation support as needed.
QUALIFICATIONS:
- Bachelor’s degree in Computer Science, Information Security, or a related technical field.
- 6+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity.
- Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG).
- Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems.
- Demonstrated leadership in security incident response, investigations, and root cause analysis.
- Excellent communication and interpersonal skills with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences.
- Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment.
- Experience mentoring junior engineers and promoting best practices across teams.
- Solid documentation and operational tracking skills with familiarity in tools such as Jira, Confluence, and ticketing systems.
Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Similar Jobs
DataVisor
Mountain View, California, United States (Hybrid)
• 1 Month ago
ansira
Mexico (Remote)
• 1 Week ago
San Francisco, California, United States (On-Site)
• 7 Months ago
Qualcomm
Bengaluru, Karnataka, India (On-Site)
• 3 Weeks ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
PwC
Santa Cruz De Tenerife, Canary Islands, Spain (On-Site)
• 9 Months ago
Rackspace Technology
San Antonio, Texas, United States (Remote)
• 2 Months ago
Get notifed when new similar jobs are uploaded
Jobs in Boston, Massachusetts, United States
bytedance
San Jose, California, United States (On-Site)
• 8 Months ago
Toast
Houston, Texas, United States (Remote)
• 2 Weeks ago
SBM Management
Boston, Massachusetts, United States (On-Site)
• 1 Month ago
bytedance
San Jose, California, United States (On-Site)
• 8 Months ago
%3Aformat(webp)&w=256&q=50)
Crunchyroll
Los Angeles, California, United States (On-Site)
• 1 Month ago
Get notifed when new similar jobs are uploaded
Cyber Security Jobs
(On-Site)
• 7 Months ago
AGS - American Gaming Systems
Las Vegas, Nevada, United States (On-Site)
• 1 Month ago
Rippling
San Francisco, California, United States (On-Site)
• 1 Month ago
Get notifed when new similar jobs are uploaded
