Senior Security Engineer at Wish
Wish is a mobile e-commerce platform that flips traditional shopping on its head. We connect hundreds of millions of people with the widest selection of delightful, surprising, and-most importantly-affordable products delivered directly to their doors. Each day on Wish, millions of customers in more than 160 countries around the world discover new products. For our over 1 million merchant partners, anyone with a good idea and a mobile phone can instantly tap into a global market.
We're fueled by creating unique products and experiences that give people access to a new type of commerce, where all are welcome. If you've been searching for a supportive environment to chase your curiosity and use data to investigate the questions that matter most to you, this is the place.
The Security team is responsible for the security and integrity of the Wish platform and corporate environment which is paramount to our success. We work to secure and protect Wish's assets such as customer or payment information, and handle potential data breaches or develop tools in partnership with other technical teams. As a Senior Security Engineer, you will work with our team to assess risk and relative priority of security initiatives, and lead execution on those initiatives.
What you'll be doing:
- Help establish security best practices across the company.
- Analyze our security posture, identify gaps, and work closely with other teams to ensure strong operational security.
- Lead complex security projects from design through implementation and maintenance.
- Provide ongoing maintenance and improve system health and reliability of security services.
- Participate in design and implementation reviews of security and infrastructure projects.
- Monitor and participate in external security forums, conferences, education, etc.
- Lead and mentor junior security engineers and analysts.
- Participate in low volume on-call rotation.
- 5+ years of experience working on or with security teams.
- Experience with SRE/DevOps tasks, including deploying and maintaining production services.
- Strong knowledge of security topics including network and application security, infrastructure hardening, security baselines, and web server / database security.
- Knowledgeable in modern configuration management tools (i.e Salt, Ansible, Fabric, etc.) and CI/CD systems.
- Experience with AWS or other cloud environments.
- Excellent technical writing and documentation skills.
Nice to have:
- B.S. degree in Computer Science.
- Experience working with container technology including Docker and Kubernetes.
- Knowledge of network based, system level, and application layer attacks and mitigation methods.
Wish values diversity and is committed to creating an inclusive work environment. We provide equal employment opportunity for all applicants and employees. We do not discriminate based on any legally-protected class or characteristic. Employment decisions are made based on qualifications, merit, and business needs. If you need assistance or accommodation due to a disability, please let your recruiter know. For job positions in San Francisco, CA, and other locations where required, we will consider for employment qualified applicants with arrest and conviction records.