Description:

Instructure is seeking a Security Engineer to join their remote R&D Security team.
The role involves designing, implementing, and maintaining security tooling to protect the company's SaaS platform.
The Security Engineer will work closely with cross-functional teams to identify and address vulnerabilities, implement best practices, and ensure compliance with industry standards.
Responsibilities include ensuring secure configurations of cloud environments, developing infrastructure-as-code security practices, and managing CNAPP platforms.
The engineer will also be responsible for deploying and maintaining zero trust platforms and supporting an overall zero trust philosophy.
Application security tasks include using static code analysis and vulnerability scanning tools to identify and remediate vulnerabilities in application code.
The role requires managing CI/CD pipeline controls and collaborating with developers to mitigate vulnerabilities in the software development lifecycle.
Security operations responsibilities include building and improving Security Orchestration and Automated Response practices and participating in incident response activities.

Requirements:

Candidates must have the ability to work effectively on a remote team in a collaborative, fast-paced environment.
Strong communication skills are required to convey technical concepts to both technical and non-technical stakeholders.
A polite and professional demeanor is essential, along with a commitment to fostering a positive workplace.
Applicants should possess excellent problem-solving and critical-thinking skills.
A willingness to learn on the job and work outside of comfort zones is necessary.
A minimum of 3 years of experience in a security engineering or similar application engineering role is required.
Proficiency in securing cloud environments, particularly AWS, is essential.
Strong familiarity with DevSecOps and CI/CD pipeline security is required.
Hands-on experience with security tools such as vulnerability scanners and code analysis tools is necessary.
Understanding of OWASP Top 10 and secure application development principles is required.
A working understanding of networking, encryption, authentication protocols, and secure application development is necessary.

Instructure offers a competitive salary and 401k plan.
Employees receive medical, dental, disability, and life insurance.
The company provides an HSA program, vision coverage, voluntary life insurance, and AD&D.
Tuition reimbursement is available for employees seeking further education.
Paid time off includes 11 paid holidays and flexible work schedules.
A LifeStyle Spending Account is also part of the benefits package.