Senior Security Engineer at Periscope
San Francisco, CA, US
DEFEND PERISCOPE AND THE DATA OF OUR CUSTOMERS
Customers trust us with their most important data. They use Periscope to query everything from revenue metrics to the personally identifiable information of their users. You will lead the effort to constantly improve the security of Periscope's architecture, production systems, and corporate infrastructure.
You will own the overall security policies and implementation at Periscope. You'll be expected to design and deploy systems that are both highly secure and highly functional. Enabling everyone at Periscope to keep moving fast while continuously increasing the strength of our security may be your greatest challenge.
HOW YOU'LL RAMP
By Day 30, you'll...
Assess the strengths and weaknesses of the current stack through static analysis, automated scanning, and custom attacks
Review code and other production changes to ensure no security issues are introduced
Work with HIPAA and SOC2 auditors to ensure compliance of Periscope's internal procedures
By 60, you'll...
Deploy improvements to the production and deployment architectures
Collaborate with third-party penetration testing vendors
Evangelize better security throughout the company
Perform offensive security testing against production and consult on development in development
By 90, you'll…
Develop new attacks against Periscope and include them in automated test suites
Create and manage our bug bounty program
Promote a security-first culture, and ensure that all employees at Periscope are able to protect Periscope from threats
Help customers understand Periscope's security through talks and whitepapers
ABOUT PERISCOPE DATA:
We're a kind, curious, tight-knit bunch. We eat together, toast our shared accomplishments together, and often spend holidays and ski trips together.
We are on-boarding rapidly! The team grew from 20 to 69 in 2016, and will grow to 140 and beyond in 2017.
We believe strongly in a data-driven approach to all that we do. We're constantly measuring and optimizing everything about the business.
We have close relationships with our customers. We see customers several times a month, and email with them several times a week.
Recent Engineering Projects:
Speeding up metrics calculations by over 10,000X by implementing them as parallel bitwise operations on bitsets.
Improving chart render speed by over 100X by reimplementing on top of Canvas instead of SVG.
Auto-ETLing entire customer databases into our data cache while targeting < 1hr freshness on all customer data.
Implementing cross-database query translation and cross-database joins.
Our Interview Process:
We want to know what it's like to work together; there are never any riddles or whiteboards.
First you'll see Periscope and how customers use it. Later we'll code together online, or review your solution to an offline code challenge. And when you come on site to meet the team, you'll spend a couple hours pair programming in the Periscope codebase.
Periscope's most important feature is our phenomenal development speed. We deploy to production an average of 9.7 times per day. Much of this is cultural, and much of it is investing in anything that will reduce drag on the team, like fully automated testing, one-click test-and-deploys, and great whiskey. (Wait, what?)
We plan to double our team in the next six months. If you learn quickly and have that get-shit-done attitude, we'd love to talk to you!