Lead Security Engineer

Sitecore

Sitecore offers an industry-leading digital experience platform that allows brands to create, build, manage, and deliver standout content along every touchpoint of the customer journey.

Lead Security Engineer

More than 20 years ago, 5 friends envisioned a bold future. Over the years, we’ve kept innovating marketing technology so brands like Porsche, L’Oréal, and Proctor & Gamble can deliver memorable experiences for their customers. Sitecore has 25 offices across the globe and around 1,700 employees worldwide. Learn more at Sitecore.com.

Sitecore is looking for a Lead Security Engineer with a well-rounded skill set in security development and testing to support the Sitecore Experience Platform and Managed Cloud products. As a Lead Security Engineer, you’ll collaborate closely with the other Security Engineers in Engineering and IT Security Team across Europe and North America to align and optimize our security testing and secure application development.

• Drive security improvement and compliance within Sitecore Experience Platform and Managed Cloud.
• Support the planning, design, development, and testing of products and address potential security concerns around product development.
• Participate in code review practices on occasion, sharing technical knowledge with colleagues, mentoring, and providing feedback.
• Collect and analyze data from security testing activities, communicate findings to the program and teams, and report valid and reliable information about the quality of the product to the Engineering leaders.

• Proven expertise in information security, particularly in application and cloud security.
• Experience with security frameworks such as ISO 27001/27017/27018, SOC 2, HIPAA, NIST, and CIS, and a strong understanding of security principles, protocols, and technologies.
• Proficiency in security tools and technologies, including firewalls, intrusion detection/prevention systems, and vulnerability scanners (Static Code Analysis, Third Party Library Scanning, Container Security, Web Penetration Testing, etc.).
• A profound understanding of code best practices and standards for development and testing.
• Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.

• Relevant certifications such as OSCP, CISSP, CISM, or CEH.

Sitecore is on a path of significant growth, driven by our passion for new technologies. We are prepared to capitalize on a $30 billion market opportunity, a testament to the promising stage of this field. Joining Sitecore now offers a unique chance to shape an industry that’s just beginning to unfold its potential.