Description:

Conduct a thorough security assessment of Atlan's current infrastructure, applications, and cloud environments, identifying strengths and areas for improvement.
Perform detailed threat modeling and risk assessments to identify, prioritize, and mitigate potential security threats.
Document the existing security architecture, policies, and procedures.
Develop and implement a comprehensive security strategy aligned with Atlan's business goals and industry best practices.
Establish security metrics and key performance indicators (KPIs) to measure the effectiveness of security controls.
Design and implement robust security controls across the platform, including network, application, and infrastructure security.
Integrate security best practices into the CI/CD pipeline to ensure seamless DevSecOps practices (Shift Left, Policy as Code).
Develop and implement incident response plans, conduct regular drills, and continuously improve security operations through monitoring and ongoing assessments.
Advocate for security best practices across the organization, fostering a security-first mindset and a culture of security awareness.
Lead and mentor other team members, promoting continuous learning and improvement in security practices.
Ensure compliance with relevant security standards and regulations (e.g., PCI DSS, GDPR).
Prepare for and assist in security audits and certifications.

Requirements:

A minimum of 10 years of experience leading security initiatives for enterprises in an information security (InfoSec) consultant or architect role is required.
Proven experience with implementing DevSecOps principles, including Shift Left and Policy as Code methodologies is essential.
Experience implementing application security architecture and cloud security architecture is necessary.
In-depth knowledge and experience with Kubernetes (K8s) security is required.
Experience integrating security practices into the Secure Development Lifecycle is important.
Experience with SaaS security or platform security is a strong plus.
A strong understanding of security threats, vulnerabilities, and risk mitigation strategies is required.
Experience with security tools such as CIS Benchmarks and SIEM solutions is preferred.
Excellent analytical and problem-solving skills are necessary.
Strong communication, collaboration, and interpersonal skills are essential.
The ability to work independently and as part of a team is required.
A passion for security and a commitment to continuous learning is important.
CISSP, CISA, and/or CKS Certifications are strongly preferred.

Ownership from Day One: Employees will own impactful projects, chart their growth, and collaborate with some of the best minds in the industry.
Limitless Opportunities: At Atlan, growth has no boundaries, and employees are encouraged to take initiative.
A Global Data Community: Atlan is deeply embedded in the modern data stack, contributing to open-source projects, sponsoring meetups, and empowering team members to grow through conferences and learning opportunities.
Fully remote work environment with a fast-growing company trusted by global leaders like Cisco, Nasdaq, and HubSpot.
Opportunity to be part of a mission to empower the humans of data to achieve more, together.