Principal Security Engineer

Job description

Our HQ is located in Washington, DC but you can work anywhere! Our company has committed to offer both in-person positions at our HQ as well as fully-remote positions anywhere in the US.

Our Company

Our mission at Fundrise is to allow everyone access to a technology driven, diversified portfolio of institutional-quality real estate. Founded in 2012, we're the largest direct-to-investor real estate investment platform in the United States. We make institutional-quality real estate investments available to individual investors of every size at the touch of a button.

Since our launch, Fundrise has raised over $1 billion from investors in all 50 states and has been honored on the Inc. 5000 list of fastest growing private companies and the Financial Times 2020 and 2021 ranking of the Americas' fastest growing companies. We've also been recognized as Nerdwallet's Best Real Estate Investment Platform of 2021.

Principal Security Engineer

We're looking for a Principal Security Engineer who will work with internal customers across Engineering, DevOps, and IT at Fundrise to assess needs and deliver strong security capability for our environment. You will heavily influence Fundrise's infrastructure and data security strategy and architecture. You will have the opportunity to design and implement secure cloud infrastructure systems, select and implement security tooling, and influence secure application development priorities.

You will work on some of the most cutting-edge technologies in a modern cloud-first environment and provide value by solving real-world problems that our industry as a whole is facing.

The ideal candidate will be a hands-on security engineer with broad knowledge of cybersecurity, strong knowledge of AWS, application, and data security.

Responsibilities

• Build out our security event detection capabilities
• Select and implement security tooling
• Analyze data privacy and security needs and build secure solutions
• Conduct security assessment of the cloud environment to ensure security gaps are identified and implement remediation actions
• Participate in incident response, security testing, penetration testing, and red teaming
• Understand attacker methodology and defend against them by threat hunting, building detection mechanisms, and automating remediation procedures.
• Manage our vulnerability disclosure program
• Collaborate with other engineering teams to guide security & privacy initiatives by participating in design reviews, code reviews, & threat modeling
• Create alert logic, metrics, and tooling and remedy security events
• Research and communicate the latest trends in information security and threat environments

Minimum Qualifications

• 5 years of experience with a mix of infrastructure, network, and cloud experience, preferably with a system admin/engineer background
• Strong technical security skills in multiple areas such as application security, data security, infrastructure security
• Significant knowledge of modern cloud infrastructure and application development. You should be familiar with Serverless Architecture, Docker, IAM, EC2, VPCs, WAFs, Infrastructure as Code tools like CDK and Cloudformation
• Responded to security incidents and built out tooling to automate response
• Work autonomously with minimal direction and oversight

Preferred Qualifications

• Bachelor's degree with industry certification such as CISSP, CCSP, and other vendor certifications
• Experience developing cloud security architecture
• Experience with DevSecOps principles for integrating security solutions in products like Jenkins
• Familiarity with industry-standard data security practices as it pertains to data classification, and writing specifications and security models

Benefits at Fundrise

• Great medical, dental, and vision insurance with coverage of 100% of employee premiums and 50% of dependent premiums.
• Flexible Spending Accounts for medical expenses, dependent care, and parking.
• 401(k) with 3% contributed by Fundrise, regardless of whether you are actively contributing yourself.
• Fully covered life insurance and short-term disability.
• Significant equity via our employee stock grant program.
• Flexible PTO.
• Employee Assistance Program.
• Paid parental leave.