Description:

Buoy Software is seeking a Security and Risk Engineer to join their remote team.
The mission of Buoy Software is to enhance the blood product donation experience and improve health outcomes for patients.
The role involves overseeing vulnerability and security risk management, including risk identification, crafting mitigation proposals, and tracking mitigation status.
Responsibilities include managing security compliance activities, continuous monitoring, auditing processes, and performing code assessments.
The engineer will define, implement, evaluate, and maintain security and risk controls while identifying emerging security issues.
Collaboration with team members and stakeholders on projects and audits is essential.
The role requires designing security controls to increase operational efficiency and performing third-party security assessments.
Educating and training staff on security best practices is also a key responsibility.
The first 30 days will involve team introductions, learning internal operations, product demos, and reviewing existing security documentation.
In the first 60 days, the engineer will understand pod goals, implement solutions for identified gaps, and become more autonomous.
By the end of 90 days, the engineer will meet with stakeholders and become familiar with other departments within Buoy Software.

Requirements:

Experience with threat modeling analysis, such as STRIDE and Attack Tree methodologies, is required.
Familiarity with software as a service is necessary.
The candidate should be a self-starter who thrives in an autonomous work environment.
Adaptability to change and the ability to manage a variety of tasks is essential.
Team collaboration and a professional approach to communication are important.
The candidate must be able to represent Buoy's values both internally and externally.

The position offers a salary range of $120,000 to $140,000 per year.
Buoy Software promotes a fully remote work environment, supporting distributed teams.
The company provides an environment that fosters motivation, support, and trust for team members to accomplish their tasks.
Employment is contingent upon satisfactory background and reference checks, as well as proof of identity and eligibility to work in the United States.