Security Engineer at Cover Genius

Cover Genius is a Series E insurtech company that protects customers for some of the world's largest digital brands, including Booking Holdings, Uber, and Intuit. We are looking for a Senior Security Engineer to join our team in Australia on a full-time, hybrid basis to help us maintain and elevate our global security posture.

Responsibilities

• Lead incident management efforts by detecting, investigating, and responding to security threats, including participating in on-call rotations.
• Develop and maintain our information security strategy to align with current industry standards and emerging threats.
• Conduct risk assessments and implement mitigation strategies across our cloud infrastructure and vendor ecosystem.
• Manage identity and access operations using tools like Okta to ensure secure organizational access.
• Drive a shift-left security culture by providing engineering teams with the tools, training, and advice needed to secure web applications and pipelines.
• Oversee MDM policies for corporate devices and ensure hardware compliance across the company.
• Develop security automation tools and manage the integration of new software into our existing systems.
• Support compliance initiatives, such as SOC2, and coordinate regular external security testing like penetration tests.
• Create and deliver security awareness training and phishing campaigns to foster a security-conscious culture.

Must-haves

• Strong technical experience with AWS and/or GCP cloud platforms and their respective security best practices.
• Proven ability to secure web applications and frameworks.
• Proficiency in Linux environments and a solid understanding of networking and system architecture.
• Experience scripting and developing internal tools using at least one programming language, along with shell scripting skills.
• A Bachelor’s degree in Computer Science, Engineering, Information Security, or equivalent practical experience.
• Excellent communication and documentation skills in English, with a highly analytical and detail-oriented mindset.
• A self-motivated, professional approach with the ability to work effectively within a team.

Nice-to-haves

• Experience with identity management tools such as Google Workspace or Okta.
• Familiarity with infrastructure as code tools like Terraform.
• Knowledge of container technologies, including Docker and Kubernetes.
• Experience with cloud-native approaches to infrastructure and security.

Benefits

• Hybrid work environment.