Security Engineer

**The Company**
- Our team and products have been recognised with dozens of awards including by the Financial Times who ranked Cover Genius as the #1 fastest growing company in APAC in 2020. Our diverse team across 10 countries and many language groups commits itself to diverse cultural programs, in particular “CG Gives” which makes social entrepreneurs out of us all and funds development initiatives in global communities.

**Our People are** Bold, Authentic, Purposeful and Inspired

**Our People are not** Perfect, Traditional, Complacent or Cautious

**About the role**:
The primary responsibility of a Security Engineer is to maintain and improve the security of the organization's data and systems. In addition, members of the Security team work to ensure the organization remains compliant with applicable security compliance frameworks. A Security Engineer is expected to work across a wide range of technical functions to improve platform and corporate security.

**Your day-to-day will involve**:

- Detect, investigate, and respond to any security incidents (including on-call activities as security team).
- Plan, develop, implement and update the company's information security strategy.
- Analyzing and documenting any infosec risks and developing appropriate mitigation strategies.
- Develop, procure and deliver documentation, training and other support to all CoverGenius employees regarding. security & compliance responsibilities and best practices.
- Develop & procure tooling and automation to support any of the functions of the security team.

**What the ideal profile looks like**:

- Write Risk Management Framework (RMF)-based policies and procedures, and develop comprehensive cyber security processes to contain implementation.
- Assessing cloud infrastructure against security best practices and compliance requirements.
- Remediating and/or coordinating with appropriate teams to ensure strategies are in place to mitigate cloud infrastructure security issues.
- Assisting other engineering teams to implement a shift left security culture e.g. pipeline SAST/DAST.
- Creating and rolling out MDM policies to corporate devices and ensuring corporate devices are compliant with security policies.
- Provision, deprovision and track employee hardware. Or where appropriate that any BYO hardware is used in a sufficiently controlled fashion in compliance with infosec policies.
- Partake in technical design reviews, integration, testing, and documentation work.
- Providing information to current and prospective customers/partners regarding security.
- Conducting risk assessments for current and potential Cover Genius vendors.
- Assisting employees with corporate policy compliance.
- Coordinating and conducting regular access reviews.
- Creating security awareness training for employees.
- Assisting the organization in increasing Phishing awareness by creating phishing campaigns.
- Assisting the organization in meeting compliance framework requirements (e.g SOC2).
- Co-ordinating scheduled external security testing (e.g. annual penetration testing).

**Why Cover Genius?**

Cover Genius not only cares about being the best in our industry, we care about our team. We’re a business that understands life can be fluid and so we flex to ensure we provide the environment to suit that. What does that mean?
- Flexible Work Environment - we are outcome focussed and understand that for our people to perform at their best flexibility is critical. Soon after the declaration of the COVID-19 global pandemic the entire CG team was granted an extra 15 days of Wellness Leave to take throughout 2020.
- Employee Stock Options - we want our people to share in our success, we reward them with ownership for their contribution in creating a world-class company.
- Work with like-minded people who are passionate about both the work we're doing and giving back. Our CG Gives programs enables us to all become philanthropists through our peer recognition and rewards system.
- Social Initiatives - pictures speak a thousand words

Sound interesting? If you think you have the best composition of the above, send us your resume and let's chat