We're looking for a Cybersecurity Engineer to own our Platform / Software security. You will:
- Build our ISMS from the ground up — scope, risk assessment, Statement of Applicability, and core policies — and lead us through ISO 27001 Stage 1 audit
- Get Vanta green across every system, with a live Trust Center that takes manual security questionnaires off sales' plate for good
- Run a penetration test and close every critical and high finding before it becomes someone else's problem
- Stand up vulnerability management across code, dependencies, containers, and Terraform — with a triaged backlog and fix deadlines that actually get met
- Harden our AWS and Kubernetes baseline with least-privilege access, network segmentation, and threat-detection piped straight to on-call
- Write and tabletop-test our incident response playbook, GDPR 72-hour breach notification included, and align it with our MDR technical documentation so we run one evidence set — not two