Staff Information Security Engineer

3 weeks ago


Minneapolis, United States SmartThings Full time
Staff Information Security Engineer

Department: Behaviors, Execution and Foundation

Employment Type: Full Time

Location: Minneapolis, MN

Reporting To: Dylan Barnes

Description

We're SmartThings, one of the leading IoT ecosystems in the world, creating the most effortless way for anyone to create a smart home. As a wholly owned subsidiary of Samsung, our corporate offices are based in Minneapolis and the Bay Area.

More than 270 million people worldwide use SmartThings to control and manage their connected life. SmartThings delivers simple, powerful experiences across Samsung's leading portfolio of phones, TVs, and appliances, and we offer the most versatile smart home experience as an open platform with a rich partner ecosystem. As a founding member of Matter, we are a leader in the industry to help make smart homes more secure, reliable and seamless to use.

Like the smartphone revolution, smart home technology is transforming the way we interact with the world around us. With SmartThings products, we're reducing global emissions, improving service industries, and creating a safer, smarter planet. Come be a part of the transformation with us Do the SmartThings

SmartThings Culture & Ways of Working

SmartThings' dynamic culture continuously moves forward with agility and determination, providing an opportunity for impactful contributions across all roles. Our commitment to diversity, equity, inclusion and belonging is deeply ingrained in our core values, fostering a culture that values,celebrates, and honors the unique perspectives and experiences of every individual. Embracing inclusive practices, we strive to cultivate a work environment where everyone thrives.

At SmartThings, we're creating immersive, interconnected experiences for both our customers and our team members. Our workplace mirrors this ethos, offering a versatile hybrid environment that nurtures personal connections and fosters collaborative efforts. It's a place where we can harness the power of teamwork and also delve into focused solo work from the comfort of home a couple of days a week. Joining our team means being based in the vibrant Minneapolis/St. Paul area and working with us at our Minneapolis office three days a week, adding your unique touch to our collective journey.

About The Team

The Information Security and Privacy team at SmartThings is responsible for empowering our partners to succeed safely and securely. The world of IoT represents many new opportunities for how computers interact with the world around, and with that brings new challenges. As a Staff Information Security Engineer your role will support our ecosystem, its expansion, and growing list of new features to ensure the assets of SmartThings and our users are protected at all times.

Key Responsibilities

As a Staff Information Security Engineer at SmartThings, you will:

  • Collaborate with partner teams to achieve strategic initiatives by providing security and privacy expertise.
  • Assess and audit the security and compliance posture of the cloud platform against various internal and external risk and regulatory security frameworks
  • Develop and implement effective security controls for cloud-based and distributed architectures.
  • Ensure necessary security controls and requirements are well understood and secure development practices are in place while empowering engineers to do their jobs confidently.
  • Assess the appropriateness and effectiveness of security measures and recommend enhancements.
Skills Knowledge and Expertise

Inclusive Hiring Practices

If your skills and experience are close to what we're looking for, we encourage you to apply. We know that abilities can be developed in many different ways, and some of the most educational paths have twists and turns. Diversity of thought creates the most creative teams, and we're passionate about adding new perspectives to the conversation at SmartThings. Even if you aren't certain you meet every requirement, we encourage you to apply

What You Bring On Day One (Required Qualifications)
  • BA/BS or MS in Cybersecurity, Computer Science, or similar discipline.
  • 8+ years of experience in security operations or similar experience
  • Knowledge of security principles, techniques, and technologies
  • Experience with developing and/or recommending security controls
  • Experience with one or more compliance frameworks (PCI, ISO, HIPAA, etc.)
  • Ability to create system security defensive strategies for a fast paced, engineering-driven environment
  • Background in a variety of security and cloud technologies
  • Integration of capability into development pipelines/continuous integration
Desired Skills
  • Scripting/Programming skills
  • Experience in configuring, hardening, and assessing technical resources
  • Understanding of IoT and wireless communications (WiFi, Zigbee, Z-Wave)
  • Familiarity with AWS (EC2, Networking, Security Hub, Inspector, etc.)
  • Familiarity with security tools: Burp Suite, Nmap, Wireshark, etc.
SmartThings Benefits
  • We offer an attractive compensation package with comprehensive health benefits, including medical, dental, vision, and mental health; an HSA with employer contribution; life & disability insurance; FSAs for health and dependent care expenses; a competitive 401k with a 5% employer match, and more.
  • All of our employees enjoy unlimited PTO, 12 paid holidays, and a generous parental leave policy (8 weeks fully paid parental leave and 8 more fully paid weeks for childbirth recovery leave).
  • Eligible employees benefit from our education reimbursement program, and all employees enjoy access to learning resources through O'Reilly.
  • Our commitment to diversity, equity, inclusion and belonging is embedded into our culture and our work, and everyone has frequent opportunities to join forums and groups and participate in ongoing projects.


Compensation for this role for a candidate based in Minneapolis is expected to be between $128,148 and $192,222

  • Minneapolis, United States SmartThings Full time

    Staff Information Security EngineerDepartment: Behaviors, Execution and Foundation Employment Type: Full Time Location: Minneapolis, MN Reporting To: Dylan Barnes Description We're SmartThings, one of the leading IoT ecosystems in the world, creating the most effortless way for anyone to create a smart home. As a wholly owned subsidiary of Samsung, our...


  • Minneapolis, United States SmartThings Full time

    Staff Information Security EngineerDepartment: Behaviors, Execution and Foundation Employment Type: Full Time Location: Minneapolis, MN Reporting To: Dylan Barnes Description We're SmartThings, one of the leading IoT ecosystems in the world, creating the most effortless way for anyone to create a smart home. As a wholly owned subsidiary of Samsung, our...


  • Minneapolis, United States SmartThings Full time

    Job DescriptionJob DescriptionDescriptionWe’re SmartThings, one of the leading IoT ecosystems in the world, creating the most effortless way for anyone to create a smart home. As a wholly owned subsidiary of Samsung, our corporate offices are based in Minneapolis and the Bay Area.More than 270 million people worldwide use SmartThings to control and manage...


  • Minneapolis, United States SmartThings Full time

    Job DescriptionJob DescriptionDescriptionWe’re SmartThings, one of the leading IoT ecosystems in the world, creating the most effortless way for anyone to create a smart home. As a wholly owned subsidiary of Samsung, our corporate offices are based in Minneapolis and the Bay Area.More than 270 million people worldwide use SmartThings to control and manage...


  • Minneapolis, United States BCforward Full time

    Information Security Engineer BCforward is currently seeking a highly motivated Information Security Engineer for a remote position. Position Title: Information Security Engineer Location: Remote Anticipated Start Date: [6/1/2024] Please note this is the target date and is subject to change. BCforward will send official notice ahead of a confirmed start...


  • Minneapolis, United States BCforward Full time

    Information Security Engineer BCforward is currently seeking a highly motivated Information Security Engineer for a remote position. Position Title: Information Security Engineer Location: Remote Anticipated Start Date: [6/1/2024] Please note this is the target date and is subject to change. BCforward will send official notice ahead of a confirmed start...


  • Minneapolis, United States Minnesota Visiting Nurse Agency Full time

    SUMMARY: We are currently seeking an *Information Security Engineer Senior *to join our Information Security team.. This full-time role will work days. Primarily remote work but requires ability to report to campus last minute as needed. Purpose of this position: The Information Security Engineer Senior is responsible for protecting the organization's...


  • Minneapolis, United States Hennepin County Medical Center Full time

    SUMMARY: We are currently seeking an Information Security Engineer Senior to join our Information Security team.. This full-time role will work days. Primarily remote work but requires ability to report to campus last minute as needed.     Purpose of this position: The Information Security Engineer Senior is responsible for protecting the organization's...


  • Minneapolis, United States Hennepin County Medical Center Full time

    SUMMARY: We are currently seeking an Information Security Engineer Senior to join our Information Security team.. This full-time role will work days. Primarily remote work but requires ability to report to campus last minute as needed.     Purpose of this position: The Information Security Engineer Senior is responsible for protecting the organization's...


  • Minneapolis, United States Diverse Lynx Full time

    Security Engineer Minneapolis, MN permanent JD: 10+ Senior security information Engineer - Minneapolis, MN - Remote Strong security engineer Azure architect certification (AZ-500, SC-100) DLP Exp | Web Proxy | Azure cloud security SAAS SD-WAN vulnerability Proxy Strong Troubleshooting Leading major incidents independently Need...


  • Minneapolis, United States Diverse Lynx Full time

    Security Engineer Minneapolis, MN permanent JD: 10+ Senior security information Engineer - Minneapolis, MN - Remote Strong security engineer Azure architect certification (AZ-500, SC-100) DLP Exp | Web Proxy | Azure cloud security SAAS SD-WAN vulnerability Proxy Strong Troubleshooting Leading major incidents independently Need...


  • Minneapolis, United States WELLS FARGO BANK Full time

    About this role:Wells Fargo is seeking a motivated Lead Information Security Engineer to join an exciting, fast paced team working on cutting edge encryption, tokenization and key management technologies that are leveraged to protect information companywide. This role will provide technical leadership, and be an individual contributor, to teams that design,...


  • Minneapolis, United States WELLS FARGO BANK Full time

    About this role:Wells Fargo is seeking a motivated Lead Information Security Engineer to join an exciting, fast paced team working on cutting edge encryption, tokenization and key management technologies that are leveraged to protect information companywide. This role will provide technical leadership, and be an individual contributor, to teams that design,...


  • Minneapolis, United States Wells Fargo Full time

    About this role: Wells Fargo is seeking a motivated Lead Information Security Engineer to join an exciting, fast paced team working on cutting edge encryption, tokenization and key management technologies that are leveraged to protect information companywide. This role will provide technical leadership, and be an individual contributor, to teams that design,...


  • Minneapolis, Minnesota, United States Hennepin County Medical Center Full time

    Hennepin Healthcare is an integrated system of care that includes HCMC, a nationally recognized Level I Adult Trauma Center and Level I Pediatric Trauma Center and acute care hospital, as well as a clinic system with primary care clinics located in Minneapolis and across Hennepin County. The comprehensive healthcare system includes a 473-bed academic medical...


  • Minneapolis, United States Hennepin County Medical Center Full time

    Hennepin Healthcare is an integrated system of care that includes HCMC, a nationally recognized Level I Adult Trauma Center and Level I Pediatric Trauma Center and acute care hospital, as well as a clinic system with primary care clinics located in Minneapolis and across Hennepin County. The comprehensive healthcare system includes a 473-bed academic medical...


  • Minneapolis, United States Hennepin County Medical Center Full time

    Hennepin Healthcare is an integrated system of care that includes HCMC, a nationally recognized Level I Adult Trauma Center and Level I Pediatric Trauma Center and acute care hospital, as well as a clinic system with primary care clinics located in Minneapolis and across Hennepin County. The comprehensive healthcare system includes a 473-bed academic medical...


  • Minneapolis, Minnesota, United States Hennepin County Medical Center Full time

    Hennepin Healthcare is an integrated system of care that includes HCMC, a nationally recognized Level I Adult Trauma Center and Level I Pediatric Trauma Center and acute care hospital, as well as a clinic system with primary care clinics located in Minneapolis and across Hennepin County. The comprehensive healthcare system includes a 473-bed academic medical...


  • Minneapolis, United States Allspring Global Investments Full time

    Elevate Your Career Work where your ideas have impact COMPANY Allspring Global Investments is a leading independent asset management firm that offers a broad range of investment products and solutions designed to help meet clients' goals. At Allspring, our vision is to inspire a new era of investing that pursues both financial returns and...


  • Minneapolis, United States Canonical - Jobs Full time

    Job DescriptionJob DescriptionWe have opened several senior/staff Security Operations Engineer (SOC) positions, creating a new team reporting to the CISO. We are looking for a range of experience in these positions - at the high end we are looking for deep experience defending highly contested critical assets and high-value cyber targets against advanced...