SecOps Engineer
Swapcard, Italy

At Swapcard, we build communities by empowering meaningful connections and know it all begins with a strong community of our own. We believe that diverse collaboration brings us closer to embracing change and propels us to form the ideas of tomorrow in an ever-evolving world.
Powered by artificial intelligence, Swapcard is the only end-to-end community platform for virtual and hybrid events. Behind this vision, stands a passionate, curious, and down-to-earth team. We believe an environment of trust, autonomy, and support is integral to our success. As a result of putting people first, career evolution and rapid growth have become regular commodities.
With 42 nationalities amongst a team of more than 200 innovative minds, we enjoy an open-minded environment where opinions and ideas are encouraged and exchanged freely in order to create a product and company we can all be proud of. We’ve also learned that the more moments we share, the more comfortable, communicative, and confident we are when working together. That’s when the real magic occurs.
And the best part? Swapcard offers full remote opportunities, which means you’ll be able to bring your best self to the table no matter where in the world you are located! We fully support and empower an international environment, where all cultures, mindsets, and backgrounds are equally welcome and appreciated.
Our Values Curiosity: Rapid growth and evolution are the results of our endless quest for new knowledge and understanding. We’re interested in our peers and their concerns. Anything novel or innovative excites us. Open-mindedness: Feedback and ideas can be exchanged freely, without being taken personally. We welcome Swapcardians of all sorts and learn from each other’s personal and professional experiences. Humanity: Empathy encourages a kind and down-to-earth environment where we all feel comfortable and free to be human. We never have to wear a mask or hide who we are. Resilience: We have a desire to win and don’t take no for an answer. We prefer the term experiment over failure. We are solution-oriented and find innovative approaches to succeed. Ambition: Nothing is impossible. We're always striving to get better, seize opportunities, and reach the top. We are encouraged to dream big and believe in ourselves.
What you’ll be doing

• Own and perform application and infrastructure Security vulnerability management
• Perform Security Pentesting of new features and releases.
• Own and manage the Bug Bounty Platform
• Facilitate and support the preparation of security releases
• Contribute to the Information Security roadmap creation and implementation
• Create and maintain SecOps documentation
• Highly contribute to training other team members on SecOps
• Participate in and support application and Cloud infrastructure security reviews and threat modelling, including code review and dynamic testing
• Maintain SLAs for SOC 2 and ISO 27001 Compliance
• Perform risk assessments for compliance and new releases.

What you should have

• 3+ years experience in Security and SecOps/DevSecOps
• Have experience with Pentesting tools (Burpsuite, Nmap)
• Have experience with Secure Development Lifecycle
• Have experience with SAST (e.g. SonarQube, Snyk)
• Have experience with common software vulnerabilities (OWASP top 10, etc.)
• Have experience with WAF (Web Application firewalls)
• Familiar with DevOps tools (Git, Jira, Jenkins, Github/Gitlab/BitBucket)
• Highly motivated, goal driven, can-do approach

Bonus Points ;-)

• Familiar with Infrastructure tools like Terraform, K8S, Helm, Ansible
• Familiar with modern delivery tools like CDN, Global accelerator
• Have experience with Cloud platform security configuration and deployment (e.g. AWS/Azure)

Reasons to join us* International team with 42 nationalities (more on the way!) * Remote-first policy with offices in Paris, USA, UAE, CA, UK, amp; IN * Fast-growing startup with many opportunities for growth * Open-minded culture that appreciates differences * Feedback driven, supportive amp; curious team with DIY mindset * Family leave and remote work to ensure you have time for what matters most * Generous paid time off program to ensure your happiness * Team vacations to celebrate our achievements