Senior/Staff Security Engineer

at  WellTech

WHO WE ARE?

Welcome to Welltech – a global leader in Health & Fitness mobile applications. With over 200 million installs and a suite of six innovative apps, we’re dedicated to enhancing the health and well-being of millions worldwide. Over the past six years, our diverse and passionate team of over 600 professionals has been driving this mission forward. From intuitive nutrition trackers to groundbreaking fitness solutions, we empower individuals on their transformative journey toward optimal health and happiness.

WHY WELLTECH?

Imagine making a global impact on health and wellness as part of our team! At Welltech, you’ll have the opportunity to shape the future of our products and company, directly influencing the lives of millions. We’re at an exciting juncture with a loyal customer base and many opportunities ahead.

Thrive in Our Dynamic Culture:

• Empowerment: We encourage team members to take ownership and make impactful decisions.
• Clear Communication: We foster a collaborative environment with open and direct communication.
• Innovation: Join us in our passion for creating cutting-edge solutions and be part of something big!

Welltech’s success and constant growth is increasingly introducing new challenges to the security of our products. We are looking for a dedicated and experienced Senior/Staff Security Engineer to lead our security initiatives and drive our security strategy forward.

EXPERIENCE:

• A minimum of 5 years in Security Engineering roles.
• At least 2 years of experience leading a team of security engineers.
• Demonstrated ability to lead large scale security projects and initiatives effectively.
• Proven track record in implementing data security initiatives that meet industry standards.
• Hands-on incident response experience with a track record of managing and mitigating security incidents effectively.
• Experience with regulatory compliance standards and frameworks such as GDPR, PCI-DSS, or ISO 27001.

TECHNICAL SKILLS:

• Strong coding skills, with a focus on security-focused development.
• Proven proficiency in utilizing Datadog and PagerDuty for detection and response operations.
• Deep understanding of AWS security frameworks, practices, and tools to protect cloud-hosted environments.

SOFT SKILLS:

• Strong communication skills with the ability to articulate complex security issues to technical and non-technical audiences.
  Candidate journey: Recruiter call -> Skills assessment-> Meet the hiring manager

Why You’ll Love Working at Welltech:

• Competitive Salary & Benefits: Your skills and experience are highly valued in our compensation package.
• Inclusive Culture: We foster a supportive and engaging environment where everyone feels supported and inspired.
• Growth & Flexibility: We offer opportunities for career advancement, flexible work arrangements, and a healthy work-life balance.
• Innovation & Creativity: We encourage initiative and innovation, giving you the autonomy to drive positive change and shape the future of health and wellness.

• Team Management & Leadership: Directly manage and mentor a team of three security engineers, providing technical leadership, guidance, and career development. Foster a collaborative and inclusive team environment.
• Security Strategy Development: Design and implement mid and long-term security strategies, aligning them with business goals and technology roadmaps to ensure robust protection of digital assets. Collaborate across functions to integrate security practices into the broader organizational strategy.
• Risk Management: Identify, assess, and manage security risks, developing strategies to mitigate potential threats and vulnerabilities. Communicate risks and recommendations to senior leadership.
• Security Observability: Lead the transition from managed detection and response services to an in-house capability, ensuring seamless operational change and continuity. Develop and implement security monitoring and alerting strategies using Datadog and PagerDuty.
• Incident Response: Establish and manage an on-call incident response protocol to ensure swift and effective response to security incidents.
• Data Security Innovation: Partner with the Privacy team to establish foundational data security practices and policies, driving data security initiatives that comply with international industry standards and regulations.
• Certification & Compliance: Provide hands-on expertise to achieve and maintain PCI DSS certification. Ensure that security standards comply with industry regulations and best practices.