Security Engineer, Web Application Security

Bitwarden is the trusted identity security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere. Bitwarden makes it easy for all users to extend robust security across their devices with password management, secrets management, and passwordless and passkey innovations. The company is headquartered in Santa Barbara, California. Learn more at .

The Security and IT team at Bitwarden is very active; we work with all teams across the organization every single day. You'll have the opportunity to contribute to a variety of projects and planning, and will be responsible for managing new and existing security and IT related requests for the business. This role reports directly to the Head of Information Security.

This is an all-remote team, and Eastern U.S. time zone is preferred. We do not offer visa sponsorship at this time.

RESPONSIBILITIES

Assist with Security and IT related Technical Service Desk tickets
First touch point for user support (investigation/resolution, referral to TSD/Senior team member, etc)
Assist with access control changes, onboarding automation SCIM, and user provisioning / deprovisioning.
Strong hands-on expertise with configuring and administering/ maintaining Atlassian cloud products (JIRA, Service Management, Confluence, etc).
Security and IT administrative tasks related to auditing, access management, and licensing users across various departments.
Responds to, and where appropriate, resolves or escalates security incidents and investigations.
Assist Security and IT and other divisions with ensuring the secure and ethical implementation and operation of AI systems and data within the organization.
Investigates, monitors and reviews SOC and SIEM alerts and network traffic for unusual or suspicious activity or security events, and investigates these as a first level responder. Provides escalations to tier 2 and tier3 SOC team as needed to assist with investigation of security events.
Assist with developing and maintaining documentation for security systems, services and procedures to support Bitwarden’s security, compliance needs and certification requirements such as ISO 27001, SOC2, HIPAA, and GDPR.
Administer and maintain endpoint protection and overall security and data protection utilizing various technologies such as Endpoint Detection and Response (EDR), Mobile Device Management (MDM), Secure Access Service Edge (SASE), Data Loss Prevention (DLP), DarkOps and Brand protection service, and other security solutions.
Establish and document standardized processes for managing security and IT services and establish secure/hardened system configuration baselines. Document related IT process and procedures.
Assist with patching and updating and overall vulnerability management to keep all systems and endpoint devices secure and operational with minimal downtime. This includes Endpoint/ Asset standardization and maintaining OS and system updates/ patches, leveraging policy enforcements that are managed via our MDM

WHAT YOU BRING TO BITWARDEN

Ability to provide security and IT related coverage ahead of the US East Coast time zone. This expands the availability of our security and IT team
A Security and IT generalist that has prior experience working in environments with diverse technologies and can dive deep on domain expertise.
Experience managing equipment and software across a distributed, remote, and decentralized global workforce
Ability to maintain discretion, handle sensitive information and maintain security best-practices
Interested in solving security and IT challenges through technical awareness, assurance, and partnership
Security technocrat at heart, staying current with trends and new technologies
Familiarity with security standards and regulations relevant to AI and data privacy
Collaborative and adaptable mindset
Openness and authenticity combined with excellent communication skills
Excitement and enthusiasm for open source and for better internet security
Excellent problem-solving skills – you might not know all the answers but you know how to find and communicate the solutions

WHAT TO EXPECT IN THE INTERVIEW PROCESS

Meeting with our Recruiting team
Interview with our Head of Information Security
Interview/s with team members
Reference calls

A FEW REASONS TO WORK WITH US

Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations.
Become an expert. You’ll get immersed in the prominent technology markets of security and open source software.
We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world.
Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development.

In the United States, the starting base compensation range for this role is $115,000 - $145,000. Actual compensation may vary based on level, relevant experience, and skill set as assessed in the interview process, as well as market data by location. See our careers page for a list of benefits. Please note that compensation outside the U.S. will differ based on the market.

Originally posted on Himalayas

Job Description

This is an all-remote team, and Eastern U.S. time zone is preferred. We do not offer visa sponsorship at this time.

RESPONSIBILITIES

Assist with Security and IT related Technical Service Desk tickets
First touch point for user support (investigation/resolution, referral to TSD/Senior team member, etc)
Assist with access control changes, onboarding automation SCIM, and user provisioning / deprovisioning.
Strong hands-on expertise with configuring and administering/ maintaining Atlassian cloud products (JIRA, Service Management, Confluence, etc).
Security and IT administrative tasks related to auditing, access management, and licensing users across various departments.
Responds to, and where appropriate, resolves or escalates security incidents and investigations.
Assist Security and IT and other divisions with ensuring the secure and ethical implementation and operation of AI systems and data within the organization.
Investigates, monitors and reviews SOC and SIEM alerts and network traffic for unusual or suspicious activity or security events, and investigates these as a first level responder. Provides escalations to tier 2 and tier3 SOC team as needed to assist with investigation of security events.
Assist with developing and maintaining documentation for security systems, services and procedures to support Bitwarden’s security, compliance needs and certification requirements such as ISO 27001, SOC2, HIPAA, and GDPR.
Administer and maintain endpoint protection and overall security and data protection utilizing various technologies such as Endpoint Detection and Response (EDR), Mobile Device Management (MDM), Secure Access Service Edge (SASE), Data Loss Prevention (DLP), DarkOps and Brand protection service, and other security solutions.
Establish and document standardized processes for managing security and IT services and establish secure/hardened system configuration baselines. Document related IT process and procedures.
Assist with patching and updating and overall vulnerability management to keep all systems and endpoint devices secure and operational with minimal downtime. This includes Endpoint/ Asset standardization and maintaining OS and system updates/ patches, leveraging policy enforcements that are managed via our MDM

WHAT YOU BRING TO BITWARDEN

Ability to provide security and IT related coverage ahead of the US East Coast time zone. This expands the availability of our security and IT team
A Security and IT generalist that has prior experience working in environments with diverse technologies and can dive deep on domain expertise.
Experience managing equipment and software across a distributed, remote, and decentralized global workforce
Ability to maintain discretion, handle sensitive information and maintain security best-practices
Interested in solving security and IT challenges through technical awareness, assurance, and partnership
Security technocrat at heart, staying current with trends and new technologies
Familiarity with security standards and regulations relevant to AI and data privacy
Collaborative and adaptable mindset
Openness and authenticity combined with excellent communication skills
Excitement and enthusiasm for open source and for better internet security
Excellent problem-solving skills – you might not know all the answers but you know how to find and communicate the solutions

WHAT TO EXPECT IN THE INTERVIEW PROCESS

Meeting with our Recruiting team
Interview with our Head of Information Security
Interview/s with team members
Reference calls

A FEW REASONS TO WORK WITH US

Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations.
Become an expert. You’ll get immersed in the prominent technology markets of security and open source software.
We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world.
Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development.

Originally posted on Himalayas

Job Description

This is an all-remote team, and Eastern U.S. time zone is preferred. We do not offer visa sponsorship at this time.

RESPONSIBILITIES

Assist with Security and IT related Technical Service Desk tickets
First touch point for user support (investigation/resolution, referral to TSD/Senior team member, etc)
Assist with access control changes, onboarding automation SCIM, and user provisioning / deprovisioning.
Strong hands-on expertise with configuring and administering/ maintaining Atlassian cloud products (JIRA, Service Management, Confluence, etc).
Security and IT administrative tasks related to auditing, access management, and licensing users across various departments.
Responds to, and where appropriate, resolves or escalates security incidents and investigations.
Assist Security and IT and other divisions with ensuring the secure and ethical implementation and operation of AI systems and data within the organization.
Investigates, monitors and reviews SOC and SIEM alerts and network traffic for unusual or suspicious activity or security events, and investigates these as a first level responder. Provides escalations to tier 2 and tier3 SOC team as needed to assist with investigation of security events.
Assist with developing and maintaining documentation for security systems, services and procedures to support Bitwarden’s security, compliance needs and certification requirements such as ISO 27001, SOC2, HIPAA, and GDPR.
Administer and maintain endpoint protection and overall security and data protection utilizing various technologies such as Endpoint Detection and Response (EDR), Mobile Device Management (MDM), Secure Access Service Edge (SASE), Data Loss Prevention (DLP), DarkOps and Brand protection service, and other security solutions.
Establish and document standardized processes for managing security and IT services and establish secure/hardened system configuration baselines. Document related IT process and procedures.
Assist with patching and updating and overall vulnerability management to keep all systems and endpoint devices secure and operational with minimal downtime. This includes Endpoint/ Asset standardization and maintaining OS and system updates/ patches, leveraging policy enforcements that are managed via our MDM

WHAT YOU BRING TO BITWARDEN

Ability to provide security and IT related coverage ahead of the US East Coast time zone. This expands the availability of our security and IT team
A Security and IT generalist that has prior experience working in environments with diverse technologies and can dive deep on domain expertise.
Experience managing equipment and software across a distributed, remote, and decentralized global workforce
Ability to maintain discretion, handle sensitive information and maintain security best-practices
Interested in solving security and IT challenges through technical awareness, assurance, and partnership
Security technocrat at heart, staying current with trends and new technologies
Familiarity with security standards and regulations relevant to AI and data privacy
Collaborative and adaptable mindset
Openness and authenticity combined with excellent communication skills
Excitement and enthusiasm for open source and for better internet security
Excellent problem-solving skills – you might not know all the answers but you know how to find and communicate the solutions

WHAT TO EXPECT IN THE INTERVIEW PROCESS

Meeting with our Recruiting team
Interview with our Head of Information Security
Interview/s with team members
Reference calls

A FEW REASONS TO WORK WITH US

Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations.
Become an expert. You’ll get immersed in the prominent technology markets of security and open source software.
We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world.
Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development.

Originally posted on Himalayas

Job Description

This is an all-remote team, and Eastern U.S. time zone is preferred. We do not offer visa sponsorship at this time.

RESPONSIBILITIES

Assist with Security and IT related Technical Service Desk tickets
First touch point for user support (investigation/resolution, referral to TSD/Senior team member, etc)
Assist with access control changes, onboarding automation SCIM, and user provisioning / deprovisioning.
Strong hands-on expertise with configuring and administering/ maintaining Atlassian cloud products (JIRA, Service Management, Confluence, etc).
Security and IT administrative tasks related to auditing, access management, and licensing users across various departments.
Responds to, and where appropriate, resolves or escalates security incidents and investigations.
Assist Security and IT and other divisions with ensuring the secure and ethical implementation and operation of AI systems and data within the organization.
Investigates, monitors and reviews SOC and SIEM alerts and network traffic for unusual or suspicious activity or security events, and investigates these as a first level responder. Provides escalations to tier 2 and tier3 SOC team as needed to assist with investigation of security events.
Assist with developing and maintaining documentation for security systems, services and procedures to support Bitwarden’s security, compliance needs and certification requirements such as ISO 27001, SOC2, HIPAA, and GDPR.
Administer and maintain endpoint protection and overall security and data protection utilizing various technologies such as Endpoint Detection and Response (EDR), Mobile Device Management (MDM), Secure Access Service Edge (SASE), Data Loss Prevention (DLP), DarkOps and Brand protection service, and other security solutions.
Establish and document standardized processes for managing security and IT services and establish secure/hardened system configuration baselines. Document related IT process and procedures.
Assist with patching and updating and overall vulnerability management to keep all systems and endpoint devices secure and operational with minimal downtime. This includes Endpoint/ Asset standardization and maintaining OS and system updates/ patches, leveraging policy enforcements that are managed via our MDM

WHAT YOU BRING TO BITWARDEN

Ability to provide security and IT related coverage ahead of the US East Coast time zone. This expands the availability of our security and IT team
A Security and IT generalist that has prior experience working in environments with diverse technologies and can dive deep on domain expertise.
Experience managing equipment and software across a distributed, remote, and decentralized global workforce
Ability to maintain discretion, handle sensitive information and maintain security best-practices
Interested in solving security and IT challenges through technical awareness, assurance, and partnership
Security technocrat at heart, staying current with trends and new technologies
Familiarity with security standards and regulations relevant to AI and data privacy
Collaborative and adaptable mindset
Openness and authenticity combined with excellent communication skills
Excitement and enthusiasm for open source and for better internet security
Excellent problem-solving skills – you might not know all the answers but you know how to find and communicate the solutions

WHAT TO EXPECT IN THE INTERVIEW PROCESS

Meeting with our Recruiting team
Interview with our Head of Information Security
Interview/s with team members
Reference calls

A FEW REASONS TO WORK WITH US

Our user community loves us and we love them. Come to work each day with a sense of purpose as we bring a more secure internet experience to everyone from our friends and family to the world’s largest organizations.
Become an expert. You’ll get immersed in the prominent technology markets of security and open source software.
We are dedicated to building a diverse and talented team. Work remotely with motivated and supportive team members across the world.
Learn and grow. Take on new challenges with the support of your team, and join our #growth-club to continue personal and professional development.

Originally posted on Himalayas