Staff Information Security Engineer (Remote, United States)

The Zebra

The Zebra

IT
Austin, TX, USA
Posted on Oct 10, 2024

Introduction:

The Zebra revolutionizes how connected consumers research and shop for insurance. We intentionally strive to build diverse teams that feel inclusive for all. Our motto is "All Stripes Welcome," we put that into practice by valuing traditional and non-conventional backgrounds and perspectives. Our Zeebs are passionate about learning, growing, & working together to tackle exciting problems.

We’re seeking a Staff Information Security Engineer to help secure, maintain, and elevate a world-class insurance buying experience. You will work closely with cross-functional teams, including product, engineering, and platform teams, to ensure security is embedded into every aspect of our systems and operations. You'll play a key role in designing security protocols, identifying vulnerabilities, and implementing solutions to safeguard against threats.

Location:

While we are open to remote work across the contingent US, we are still establishing our company to support work in all states! We’ve recently shifted from an in-office organization to a hybrid model and love the flexibility it allows our employees. We are set up to support employees who want to be fully remote, in-office only, and a mix of the two. Please note - we will not be supporting work based out of the following states: CA, MA, NY, NJ.

What You'll Do:

  • Lead the design, implementation, and optimization of security protocols across our infrastructure.

  • Act as a security advisor while designing and deploying new systems, services, and features.

  • Proactively identify, analyze, and resolve security issues in applications and networks.

  • Implement security measures and monitor for intrusions, vulnerabilities, or data breaches.

  • Collaborate with engineering teams to integrate security best practices into development and deployment workflows.

  • Design and manage incident response plans, leading efforts during security breaches or incidents.

  • Stay current with industry trends, threats, and security standards to ensure best practices are applied.

  • Provide mentorship and guidance to junior security engineers and team members.

  • Ensure compliance with relevant regulations and internal security policies, such as SOC 2, PCI, etc.

  • Evaluate and deploy security tools and technologies to improve our security posture.

What We're Looking For:

As we evaluate candidates across all roles, we look for folks who have a strong sense of ownership, great communication and collaboration skills, and a dedication to continuous improvement.

  • 8+ years of experience in Information Security, with a proven track record of designing and implementing security solutions at scale.

  • Strong understanding of security frameworks (e.g., NIST, ISO 27001) and their practical application in cloud environments.

  • Experience with AWS and cloud-native security practices.

  • Hands-on experience with SIEM tools, firewalls, intrusion detection/prevention systems, and encryption.

  • Familiarity with DevSecOps principles and experience working with engineering teams to secure CI/CD pipelines.

  • Strong scripting skills in Python, Bash, or similar languages.

  • Experience performing threat modeling, security assessments, and vulnerability management.

  • Familiarity with regulatory standards like SOC 2, PCI DSS, and GDPR.

  • Proven ability to lead incident response efforts and security breach investigations.

  • Excellent problem-solving, communication, and interpersonal skills.

Benefits & Perks:

Inclusive and healthy environments are crafted intentionally. All of our employees can join and participate in (or create your own!) Employee Resource Groups. Here are some other wonderful perks of working here:

  • Competitive Compensation & Stock Option Offering

  • Health, Dental, Vision & Disability Coverages

  • HSA offering + employer contribution

  • 401k with match

  • Unlimited PTO (paid time off)+ flexibility to enjoy it

  • Paid Parental Leave Program

  • Wellness perk ($100/month)

  • Pet Adoption Reimbursement ($300/year)

  • Learning & Development Opportunities

  • Join a team that truly lives their values (outside of the office. Cliche, we know… but we really mean it)

About The Zebra:

The Zebra is the nation’s leading, independent insurance comparison site. With our dynamic, real-time quote comparison tool, consumers can identify insurance companies with the coverage, service level, and pricing to suit their unique needs. Headquartered in Austin, Texas, The Zebra has sought to bring transparency and simplicity to insurance shopping since 2012 -- it's “insurance in black and white.”

We've garnered attention and investment from some of the nation’s top venture capitalists. Check out all of our awards & recognition!

Our core mantra is "All Stripes Welcome." As part of our dedication to maintaining an inclusive and diverse workforce, we provide equal employment opportunities (EEO) to all employees and applicants without regard to race, color, religion, sex, national origin, age, disability, or genetics. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform core job functions, and receive other benefits and privileges of employment. Please contact us to request accommodation!