Senior Security Analyst
Webflow is a visual web development platform that empowers non-coders to create incredible experiences for the web.
As a Senior Security Analyst on Webflow's new Security and Compliance team, you will work with the Information Security Manager to help us meet future compliance and certification needs. You will work as part of a team to establish and improve corporate security requirements by evaluating business strategies and requirements, researching information security standards, performing risk assessments, identifying integration issues, and providing recommendations for remediating identified risk, particularly as they relate to our Webflow applications and cloud infrastructure. Key responsibilities include implementing and monitoring various security tools, incident response, third-party security reviews and assisting with internal and external audits.
About the role
- Location: San Francisco or US remote
- Full-time
As the Senior Security Analyst, you’ll …
- Act as an advocate of information security policies, standards and as a mechanism to enable the business effectively while managing risk appropriately
- Work with product and engineering teams on security procedures regarding governance, monitoring, and remediation practices
- Implement continuous monitoring solutions to understand and explain security risks and mitigation techniques
- Partner with internal teams to establish preventative controls to support compliance via automation
- Stay current on cloud security policies, standards, regulations, and best practices
- Assist in the implementation of a formalized information security awareness offering
- Work with the BizOps team to respond to customer questions regarding security, compliance, and resilience
That said, these role responsibilities are just the start! At Webflow, we encouraged you to contribute wherever your interests take you — and shape your role accordingly.
And this isn’t just a philosophical bent: we actually give you 4 hours a week (10% of the work week) to tackle passion projects outside of your role responsibilities.
About you
You’ll thrive as the Senior Security Analyst if you have:
- Experience with Infrastructure and Platform Services such as IAM, compute (i. e. EC2, GCE), AWS Key Management Service/Google Cloud Key Management Service, storage (volume/object) etc.
- Knowledge with native cloud security services AWS Trusted Advisor, Amazon Inspector, or Google Cloud Security Scanner
- Experience with monitoring tools such as AWS CloudWatch/Google Cloud Monitoring, Splunk, AWS Lambda, Google Cloud Functions, or AWS Config
- Familiarity with security frameworks CSA, NIST, ISO, CIS etc.
- Technical skills to identify and assess cloud security vulnerabilities and risks
- Expertise in researching and evaluating identified vulnerabilities and risks pose to the organization’s information and systems
- Experience producing security related communications to stakeholders and company leadership
- Experience in the administration and management of continuous monitoring solutions
However, even if you don’t meet 100% of the above qualifications, you should still seriously consider applying. Studies show that you can still be considered for a role if you meet just 50% of a role’s requirements.
About us
At Webflow, we believe that our success will not only be defined by what we do — but by how and why we do it. So, here is the Webflow “why” and our “how”:
Our dual missions — one for the world, one for us
- For the world: To empower everyone to create for the web and spark an unprecedented wave of digital innovation.
- For ourselves: Lead fulfilling, impactful lives.
Our core behaviors (how we act)
- Start with customers
- Practice extraordinary kindness
- Be radically candid
- Move intentionally fast
- Just fix it
- Lead by serving others
- Dream big
Our commitments to you
- We’ll pay you! This is a full-time, salaried position that includes equity
- We’ll invest in your physical and mental well-being with health, dental, and vision benefits and a monthly stipend for health and wellness expenses
- We’ll pay you to take a vacation … seriously. We’ll give you a $1,000 bonus for taking your first vacation with us that is more than 5 days
- We offer flexible parental leave
- We provide remote employees with the equipment they need to create a great remote work environment
- We will offer you the support you need to help you grow as an impactful Senior Security Analyst and a healthy human being
Ready to apply?
If you share our values and our enthusiasm for empowering the world, we’d love for you to apply!
Note: You'll need valid U.S. work authorization to join us.