Senior Corporate Security Engineer

Cockroach Labs is the team behind CockroachDB, an open source, distributed SQL database. In addition to the open source version of the DB we are proud to offer our self-service, fully managed cloud offerings of CockroachDB with Dedicated and Serverless options. We aim to build infrastructure that keeps pace with the world, so developers can focus on what matters most: building the best products. Join us on our mission to enable every developer to build world-changing applications. 

Cockroach Labs is looking for a passionate individual to join our Corporate Engineering team to focus on our security efforts. This is a hands-on and multi-functional role where you’ll be working with different teams across the company on a variety of projects related to security.

This role is focused on company-facing security work, focusing on all aspects of IT security including, endpoint security, office infrastructure, data loss prevention, compliance reviews, and more.

In this role, you’ll also have an opportunity to make a significant impact by helping establish the culture and practices for security engineering at Cockroach Labs.

• Work with our IT team to monitor and respond to security alerts.
• Architect, configure, and maintain security systems, including Crowdstrike Falcon and CASB solutions, to protect sensitive data and ensure secure access controls.
• Manage security within Google Workspace and our email security platform.
• Manage IAM with Okta, create access control policies, ensure proper implementation of least privilege and RBAC across internal and SaaS applications. 
• Work to continue integrating security tools into CRL SIEM, develop detections based on usage and audit logs, manage and triage detections and alerts. Build automations for triaging alerts and remediating issues. 
• Perform regular security assessments and audits to identify risks and vulnerabilities, triage found risks appropriately,  then design controls to implement as corrective actions.
• Lead incident response efforts, including investigation and remediation of security breaches.
• Create policy, workflows, and best practices for the Corporate Engineering Team and the company at large.
• Work with the compliance team to conduct third party SaaS security reviews and support other compliance initiatives such as SOC 2 and GDPR.
• Build internal security culture by leading internal security awareness and training programs.
• Spearhead Corporate Security initiatives, plan projects and track their progress.
• Be a part of the Corporate Security on-call rotation.
• Collaborate with application security, cloud security , and compliance teams on ongoing projects. 

• 5+ years of experience in a Security Operations/IT security position
• 2+ years of hands-on experience as an administrator on some or all of the following types of tools: EDR, MDM, SIEM, Okta, Google Workspace, EntraID,& CASB solutions.
• 2+ years experience as an administrator of various enterprise SaaS applications. 
• A strong understanding of standard corporate IT systems such as office networks, physical security systems, email and DNS configuration, file sharing systems, etc. 
• Experience independently managing short and long term projects.
• Knowledge of security and compliance frameworks like NIST, SOC2, ISO270001, PCI-DSS.
• Experience performing risk assessments, gap assessments, and threat modeling. 
• A strong understanding of networking concepts, application security, authentication & authorization and cloud security best practice.
• Strong knowledge of overall security concepts and best practices. 
• Experience with creating automations, using a scripting language like python, nice to have.
• Experience with cloud platforms such as AWS, GCP, Azure nice to have.
• Relevant security certifications such as Sec+, CISSP, preferred but not required.

In your first 30 days, you will become an integrated member of our Corporate Engineering Team. You’ll become familiar with our identity management, fleet management, and endpoint security system. We believe that it's essential for you to take this first month to become familiar with our technology, processes and our company.

In your second month, you’ll begin to audit our infrastructure and policies. You will offer to make improvements, streamlining pain points and hardening our security posture.

In your third month, you’ll be leading processes to monitor and respond to security events from our security monitoring systems, and will take ownership of reporting and following up on these. You will work to implement new tool deployments and lower DLP while improving security posture across the firm.

In addition to your reporting director, you will work closely with senior management.

Reporting to Richard Dachtera - Senior Manager, Corporate Engineering

Richard is the founding member of the Corporate Engineering team at Cockroach Labs. Over the last two and a half years he’s owned every aspect of the organization. He helped bring the company to SOC2 compliance, supported the company during the COVID transition and opened three offices for the company. Before Cockroach Labs he spent five years at Dropbox as their founding Corporate Engineer hire in New York and then Seattle. Outside of work he’s an avid photographer, with rolls of film easily found in his coat pockets. Also Richard is the unofficial photographer for the company, volunteering his time to take headshots for all employees.

Mike Geehan  - Senior Director of Security

Mike Geehan is responsible for the safety and security of CockroachDB Cloud and surrounding infrastructure. Mike joined Cockroach Labs from a DC based start-up, and prior to that spent time in larger tech companies in a wide range of roles. Mike is focused on team development. Enabling and growing his team is paramount to the success of the team, and hence the business as a whole. Mike is based in Houston, Texas, and outside of work is focused on his family, his bikes, and in getting a cycling related non-profit organization off the ground.

• Competitive Health Insurance Coverage (for you & your dependents)
• Paid Parental Leave (with baby bucks)
• Flexible PTO 
• Learning & Development Budget
• Relocation Support (as applicable)

Cockroach Labs is proud to be an Equal Opportunity Employer building a diverse and inclusive workforce. If you need additional accommodations to feel comfortable during your interview process, please email us at accessibility@cockroachlabs.com.

The annual anticipated base salary range for U.S. candidates for this role is USD $125,000 to $170,000, plus commission if a sales role. We set standard ranges for all U.S.-based roles based on function, level, and geographic location, benchmarked against similar stage growth companies. In order to be compliant with local legislation, as well as to provide greater transparency to candidates, we share salary ranges on all job postings regardless of desired hiring location. Actual salaries may vary and fall outside of this range depending on factors such as a candidate’s qualifications, geographic location, skills, experience, and competencies. In addition, we are often open to a wide variety of profiles, and recognize that the person we hire may be less experienced (or more senior) than this job description as posted. Salary is one component of the Cockroach Labs’ total rewards package, which includes stock options, health insurance, life and disability insurance, funds towards professional development resources, flexible PTO, paid holidays, and parental leave, to name a few Salaries for candidates outside the U.S. will vary based on local compensation structures.