Filevine is forging the future of legal work with cloud-based workflow tools. We have a reputation for intuitive, streamlined technology that helps professionals manage their organization and serve their clients better. We’re also known for our team of extraordinary and passionate professionals who love working together to help organizations thrive. Our success has catapulted Filevine to the forefront of our field—we are ranked as one of the most innovative and fastest-growing technology companies in the country by both Deloitte and Inc.
Our Mission
Filevine is building the seamless intersection between legal and business by creating a world- class platform to help professionals scale.
Department Statement:
The Information Security team ensures security engineering efforts are effective and aligned with industry standards and best practices.
Job Summary:
Filevine is looking for a Cloud Security Engineer to join our Information Security team to ensure that our platform, applications, and infrastructure are compliant and secured at the highest levels, thus protecting and enhancing customer trust. If you are bright, hardworking, ambitious and enjoy taking ownership for security and compliance, we want to talk to you. This is an exciting opportunity to join a world-class team.
Responsibilities
- Monitor cloud environments for security issues.
- Strategize and outline goals and objectives to secure Cloud environments and Cloud applications while building the application security program.
- Investigate security breaches and other cyber security incidents.
- Install security measures and operate software/hardware to protect systems and information infrastructure, including firewalls and data encryption programs.
- Document and research security breaches and assess the damage they cause.
- Work with internal teams to perform tests and uncover network vulnerabilities.
- Help remediate detected vulnerabilities to maintain high-security standards.
- Stay current on cloud security trends and news.
- Develop company-wide best practices for cloud security.
- Research security enhancements and make recommendations to management.
- Stay up to date on information technology trends and security standards
Qualifications
- 3+ years combined in information technology/security with emphasis on network security. A BS in a technical field such as information security or computer science can be considered as supplementary experience.
- Expertise with AWS and experience with either GCP or Azure cloud infrastructure security.
- Strategize and outline goals and objectives to secure Cloud environments and Cloud applications while building the application security program.
- Experience with scripting, development, and IaC languages (e.g., JavaScript, C++, Python, PowerShell)
- Ensure Filevine is following cloud security best practices for cloud environments.
- Ensure appropriate cloud logging, monitoring and response efforts are in place to protect Filevine and our customers.
- Strong history in advising and executing security architecture design and assessments.
- Great degree of familiarity with designing and implementing secure Enterprise cloud networks.
- Significant experience with SIEM and logging technologies.
- Knowledgeable with Threat Hunting practices.
- Experience with cloud hardening best practices.
- Experience with both executing and defending network penetration tests.
- Experience with container security for Windows & Linux operating systems.
- Working knowledge of security requirements for SOC 2 Type I & II, FedRAMP, HIPAA, GDPR, CCPA and CJIS.
- Significant experience with security engineering, incident response and security operations best practice.
- Significant experience with orchestration and observability tools.
- Strong Project Management experience.
- A strong curiosity, initiative, persistence, and willingness to experiment to provide solutions to diverse technical challenges.
- Expert knowledge with SOAR platforms and creating run books / play books.
- Automation skills are a plus.
- Strong team player and work ethic are essential.
Additional Qualifications
- CISSP Certification or equivalent experience. AWS Certified Cloud Practitioner (Foundational) or equivalent experience.
- AWS Certified Developer – Associate or equivalent experience.
- AWS Certified DevOps Engineer – (Professional) or equivalent experience.
- Certified Cloud Architect (CCA) or equivalent experience.
- Certified Cloud Professional (CCP) or equivalent experience.
- Certificate of Cloud Security Knowledge (CCSK) or equivalent experience.
- CompTIA Cloud+ or equivalent experience.
- CompTIA Cloud Essentials+ or equivalent experience.
- Google Associate Cloud Engineer or equivalent experience.
- Google Professional Cloud Architect or equivalent experience.
- Microsoft Certified Azure Fundamentals or equivalent experience.
- Microsoft Azure Administrator Associate or equivalent experience.
- Microsoft Azure Solutions Architect Expert or equivalent experience.