Description:

Conduct regular application, system, and network security penetration tests and audits to identify potential vulnerabilities.
Develop and implement security enhancements for Forma’s cloud-based infrastructure, focusing on continuous improvement of defenses against threats.
Collaborate with engineering teams to integrate security practices into the development lifecycle and ensure secure coding practices are followed.
Manage and tune security tools and technologies such as firewalls, intrusion detection systems, and encryption.
Respond to and investigate security breaches or incidents, managing the resolution process and mitigating any impacts.
Participate in the creation and maintenance of security policies and procedures, ensuring they meet compliance requirements like SOC2 and ISO 27001.
Educate and train staff on security protocols and best practices, fostering a culture of security awareness within the organization.

Requirements:

Bachelor’s or Master’s degree in Information Systems, Computer Science, or a related field.
At least 8+ years of experience in security engineering, with a solid understanding of security protocols, cryptography, and application security.
Experience with cloud security architectures and solutions, particularly in AWS, Azure, or Google Cloud environments.
Proven ability to work with network diagnostic, monitoring, and analysis tools.
Strong problem-solving skills and the ability to work under pressure in a fast-paced environment.
Professional certifications such as CEH, OSCP, OSWE, etc.
Experience in a startup or SaaS environment is a plus.