Location: Saint Petersburg, Russia

Who are we?

ALM Works is an established software company that focuses on developing best-in-class applications for Project and Portfolio Management. Our flagship product, Structure for Jira, is one of the most popular applications on the Atlassian Marketplace. We have the privilege of serving more than 4,000 customers, many of which are among most well-known companies in the world: NASA, Google, Adobe, Intel, Sony, Disney, Netflix, Toyota, Twitter - to name just a few.

We are a small company with proven success record and big plans. We are expanding our team of passionate, tenacious, and solution-driven individuals at our corporate headquarters just west of Boston, in Newton, MA.

What is the job?

We're looking for an experienced software engineer with a strong background in web application security.

In the role of Senior Security Engineer, you will focus on all the technical and organizational aspects of running a secure and compliant cloud-based service. You will work directly with the engineering team, the business team and the company leadership. You will establish, maintain and evolve the practices and policies as the service grows.

This position is unique because it allows you to wear many hats and work both on the technical and organizational sides of the business. There also will be plenty of people interactions – with our team, our partners, our legal advisors and our customers.

In this position, you will have an impact on the company in the following ways:

• You will help our Engineering teams deliver high-quality, robust, secure and compliant products.
• You will help the leadership team to bring the company to the next level by establishing and improving security and privacy-related processes and achieving security and compliance certifications.
• You will help our support and sales teams answer customer's concerns about security and bring more business to the company.

You will be supported by different people in the adjacent roles.

• You will be supported by all senior engineers in all our projects in understanding the system architecture and challenges.
• CEO and the leadership team will help with implementing organizational changes and policies.
• You will be supported by the engineering and devops on-call teams in monitoring the production system.

As the first person in the company with a primary focus on security and compliance, you will shape our approach to these matters and greatly influence the future of our SaaS and on-premises products. In the future, as our operations grow, you will have the opportunity to build a larger team to ensure the security and reliability of the service.

What do we offer?

• A highly collaborative culture based on honesty, respect, and kindness.
• An environment that welcomes initiative, creativity, and constructive feedback.
• Being a part of a small team of highly skilled motivated professionals where every person matters.
• Potential for personal development and growth.
• Comfortable office environment with modern amenities.
• Flexible work hours.
• Company paid trips to conferences, trade shows, and corporate retreats.
• Competitive compensation, health insurance, short-term and long-term disability insurance.
• 4 weeks paid vacation/PTO days.
• Stock option plan, 401k plan.

What are the responsibilities?

• Lead all security- and privacy-focused efforts in the company.
• Develop policies, practices and tools to ensure secure and compliant operations.
• Lead compliance certification initiative.
• Provide our engineering team with the expertise on secure systems and privacy-related compliance.
• Implement and maintain cross-department internal privacy guidelines, suitable for a small company.
• Manage bug bounty and other security and privacy related programs.
• Develop and manage programs to identify risks, verify and ensure the secure operation of the production system.
• Review source code manually and using tools to identify potential security vulnerabilities.
• Communicate with the company's legal counsel on all matters related to privacy and security.

• In case of a security incident, lead the incident response team and communicate with the public, customers and partners to provide updates.

What are the requirements?

• At least 3 years of experience in a similar role.
• At least 5 years of engineering experience.
• Excellent verbal and written communication skills.
• Working knowledge of practical implications of GDPR and other relevant regulations.
• Knowledge of common security problems.
• Solid technical background, understanding of distributed systems architecture, high availability, scalability, zero downtime systems, databases, networking.
• Confident Linux advanced user proficiency.
• Good programming and debugging skills; knowledge of Java, JavaScript, Kotlin, TypeScript is a plus.
• Experience with AWS, monitoring tools and centralized deployment tools is a plus.
• Experience with Docker, Kubernetes is a plus.
• Great attention to detail, organizational skills.
• Ability to multitask and work autonomously.
• BS degree.

How to apply

Please send us your resume with a cover letter outlining your prior experience and a few suggestions of how you could apply it at ALM Works.

If you are interested, please send us your CV and a link to your public profile.

Apply Now!