Cloud Security Lead at Haven Technologies

Haven Technologies has built deep capabilities in the life, annuity and disability insurance spaces. And now, our tech is your tech.

The same purpose-built platform and expertise that have helped us delight customers, transform complex, advisor-driven businesses, and launch groundbreaking products with speed are available to everyone as a SaaS offering. Insurance carriers can use our advanced solutions for new business, in-force management and product development.

But Haven Technologies is not just, well, all about technology. Our people and culture make our product. We believe magic happens when people have an opportunity to work with amazing colleagues and build things that matter.

As a team made of dreamers, possibility-seekers and difference-makers, we are focused on taking on challenging problems to create simple, more accessible, and more customer centric solutions. We're located in New York's Midtown and in case you're wondering, yes, we provide free snacks. Cold brew too. If you're creative, professional and kind, we'd love to hear from you. Curious about what it’s like to work with us? Read about our culture and values here!

Let’s change the future of life insurance. Together.

ABOUT THIS ROLE:

You will be joining a small, experienced Information Security team tasked with guiding and carrying out Haven Tech’s security agenda. You will be collaborating closely with your team, as well as working hand-in-hand with employees across the broader organization to ensure that security best practices are a standard part of the way our company operates. In addition to strong technical skills, this role will require out-of-the-box thinking and thoughtfulness about how and why you do what you do. The job will be varied and challenging, using the latest tools, techniques, and apps. The ideal candidate will require experience in SRE, with a security based mindset.

WHAT YOU’LL DO: 

• Design, implement, and manage robust security solutions using Zero-Trust principles.
• Conduct regular security assessments to ensure compliance with industry standards and regulatory requirements like HIPAA/ SOC2.
• Lead incident response efforts in the event of a security breach, including containment, investigation, and recovery. Document and report security incidents, providing recommendations for improvement.
• Implement and manage data protection mechanisms such as encryption, tokenization, and data masking to safeguard sensitive information.
• Design, implement and maintain network security architectures including firewalls, VPNs, and segregated networks to protect the cloud environment. 
• Leverage Infrastructure as code (IaC) and other automation tools to deploy security measures at scale. Implement security as code practices to integrate into the CI/CD pipelines. Ensure security is baked into the infrastructure from the onset.
• Be a security advocate within the organization. Provide guidance and training to development teams on best practices for security. Stay abreast of the latest security features and threats to continuously improve the security posture.

REQUIREMENTS: 

• BS in Computer Science or Related
• 5+ years experience in Security
• 2+ years of Cloud engineering security/infrastructure
• Experience in deploying, supporting and building infrastructure for highly distributed and scalable systems living in AWS/Azure
• Expertise with IaaC (we use Terraform)
• Experience with ELK/OpenSearch
• Experience with kubernetes and containers
• Scripting experience (preferable python, javascript)
• Experience in explaining complex problems and solutions to people 
• Experience in investigating security issues in a large distributed cloud environment
• Must be able to work out of the NYC office 2-3 days/week
• Authorized to work in the US with or without sponsorship

PREFERRED: 

• Wazuh(IDS)/ NIDS experience
• AWS Security tooling (AWS Config, GuardDuty, WAF/FMS, Inspector, Macie, IAM)
• Zero Trust implementation exposure
• API Gateway, Secrets Management
• CIS Benchmarking experience
• Security monitoring experience
• Agile project management

BENEFITS:

We have a stellar team of co-workers, a really cool office, a flexible hybrid work schedule, and lots of fun activities. Oh yeah, and we pay competitive base salaries and we reward performance. Our salary structure is commensurate with experience. In addition, you will be eligible to participate in our comprehensive benefits program including medical insurance and 401(K).

We believe that one of the benefits to working here is our people and culture! We’re proud to share that we’ve been consistently named a top workplace by Great Places to Work (#6 Best Workplaces in New York) and BuiltIn (Top 10 Best Midsize Companies to Work For in NYC)!

Salary is commensurate with qualifications and experience. Target annual salary for this role is $145,000 - $165,000 + a discretionary bonus opportunity + benefits (including medical, dental, vision, accident and life insurance, paid days off, 401(k), and education reimbursement).

For California residents only:  All information collected via this job notice is subject to Haven Tech’s California Privacy Rights Notice, located at https://www.haventech.us/california-privacy-rights-notice/.