Senior Security Engineer

Senior Security Engineer

Squarespace is seeking a Senior Security Engineer to join our dedicated team responsible for monitoring and responding to security threats across our platform and subsidiaries. This role is crucial in enhancing our security posture by developing robust playbooks, crafting effective alerts, and actively participating in the triage and response to security incidents.

Key Responsibilities

• Incident Response: Respond to ongoing incidents, investigate historical compromises, and provide adept analysis and findings.
• Threat Detection: Define strategies for threat detection, alerting, and response; implement these strategies in cooperation with engineering teams.
• Automation: Define processes and automate workflows to respond to security events and incidents.
• Tool Evaluation: Architect, implement, support, and evaluate in-house and third-party security-focused tools and services.
• Collaboration: Work with and communicate with a diverse range of colleagues and teams to detect and respond to attacks.
• Documentation: Maintain comprehensive documentation for playbooks, alerts, and incident response procedures.
• Metrics and Reporting: Generate regular metrics and reports on the effectiveness of detection mechanisms, incident response times, and key performance indicators.
• Preparedness Exercises: Participate in tabletop exercises and simulations to ensure the organization's preparedness for various incident scenarios.

Who We're Looking For

• Experience: 4+ years of experience managing security incidents and/or working in a Detection & Incident Response team or equivalent function.
• Technical Skills: Strong coding background, with proficiency in Python or Node.js.
• Threat Identification: Proven experience in proactively searching for and identifying potential threats within the environment.
• Container Technologies: Familiarity with container technologies such as Docker and Kubernetes.
• Real-World Attack Mitigation: Experience protecting against and mitigating real-world attacks (DDoS, Phishing, Bruteforce/Credential Stuffing, Fraud/Abuse, etc.).
• Certifications: Industry-recognized certifications such as CISSP, GIAC, or Offensive Security Certified Professional (OSCP) are preferred.

Benefits & Perks

• Health insurance with 100% covered premiums for you and your dependent children.
• Fertility and adoption benefits.
• Headspace mindfulness app subscription.
• Retirement benefits with employer match.
• Flexible paid time off.
• Up to 20 weeks of paid family leave.
• Equity plan for all employees.
• Commuter benefit in the form of reduced tax.
• Education reimbursement.
• Employee donation match to community organizations.
• 6 Global Employee Resource Groups (ERGs).
• Free lunch and snacks.
• Close proximity to cultural landmarks such as Dublin Castle and St. Patrick's Cathedral.

About Squarespace

Squarespace is a design-driven platform helping entrepreneurs build brands and businesses online. We empower millions of customers in more than 200 countries and territories with all the tools they need to create an online presence, build an audience, monetize, and scale their business. Our suite of products ranges from websites, domains, ecommerce, and marketing tools, as well as tools for scheduling with Acuity, creating and managing social media presence with Bio Sites and Unfold, and hospitality business management via Tock.

Our Commitment

At Squarespace, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, veteran status, or other class protected by applicable law. We are proud to be an equal opportunity workplace.

Location

This is a hybrid role working from our Dublin office 3 days per week. You will report to our Security Engineering Manager.