Back Market
Vente de produits reconditionnés • Reprise de produits d'occasions • Service client aux petits soins • Marketplace • E-commerce
Staff Security Engineer
October 19
Back Market
Vente de produits reconditionnés • Reprise de produits d'occasions • Service client aux petits soins • Marketplace • E-commerce
Description
• Back Market is the world’s leading refurbished electronics marketplace with a team of 650 people, powering operations in 18 countries (and counting!). • Our mission is simple: empowering people to consume tech sustainably by offering folks a high quality, accessible, and more eco-friendly alternative to buying new electronics. • Refurbished tech helps lower our collective environmental impact and we have contributed to avoid the production of more than 1,000,000 tons of CO2e worldwide since our launch in 2014. • As a Staff Security Engineer within our CyberSecurity Tribe, safeguarding Back Market's information assets is the primary objective. • Our SecOps team manages both Security Architecture & Engineering topics, as well as actively monitoring, responding to, and remediating incidents. • Your role is pivotal within our organization, offering unparalleled opportunities to shape our security architecture and stack.
Requirements
• You are a talented and experienced engineer, with at least 10 years experience of securing web services in dynamic cloud environments • Proven experience as a Security Engineer / SOC analyst with cross-team influence • Strong understanding of cybersecurity principles, techniques, and best practices • Demonstrable ability to plan & execute large, complex projects with interdependencies. • You believe in the importance of security automation following a secure development lifecycle, with the ability to develop your own scripts and tools to succeed in your mission. • Comfortable conducting Security Requirement Analysis & propose cybersecurity architectures based on the analysis. • Threat intelligence and attack patterns expertise • Proficient in vulnerability analysis and remediation, with knowledge about setting up and tuning scanners. • Understanding of edge protection technologies including WAF, Bot management, rate limiting etc. • Familiarity with SIEM tools, network and endpoint security technologies • Passion for cybersecurity, hands-on, and eager to contribute code to our in-house modern security technologies. • You are curious, rigorous, and enjoy exploring new methods and technologies. • Transparency in communications and able to find solutions by partnering with your team when you don't have the answer. • You like to share knowledge, and make your colleagues aware of good cybersecurity practices, by supporting your proposals with concrete examples and demonstrations. • It would be a plus if your skills are recognized by a certification such as (ISC)² CISSP, CCSP or CSSLP, SANS GCTI, GDSA, CSA CCSK, BTL2 - or you are ready to obtain it in the near future. • You want to join a challenging technical environment: GCP, Kubernetes, ArgoCD, Terraform, Datadog, Cloudflare, Google Chronicle, Github, CircleCI etc., where you can spread your influence and help secure our environment. • Proficient in several coding languages such as Python, TypeScript, Golang, etc. • Great verbal and written communication skills, in English.
Benefits
• An attractive salary, equity and a host of benefits including : Lunch voucher, health insurance, relocation package, paid time off for activism in your community, parental benefits, flexible hours, etc… • The Monday Brief (weekly)/ The Somehands (monthly)/ The All Hands (annual). • Reasonable accommodations if needed for the interview process. • Employee Resource Groups created around shared identities.
Apply Now