<div dir="ltr"><div class="gmail_quote"><div dir="ltr"><p style="margin:0px;padding:0.8em 0px 0.25em;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Avaaz is a campaigning organisation that reaches tens of millions of citizens every week with opportunities to change the world. This includes protecting our planet from climate change and other threats, fighting to stop social media from undermining our democracies, and deepening human connection.<br></p><p style="margin:0px;padding:0.8em 0px 0.25em;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Our staff are based all over the world. Applicants from any timezone may apply. Avaaz will support you to set up a home or co-working environment that leads to excellence in delivery and long-term sustainability.</p><p style="margin:0px;padding:0.8em 0px 0.25em;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Link to job post: <a href="https://secure.avaaz.org/campaign/en/hiring/#op-385847-security-engineer" rel="noopener nofollow ugc" style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline" target="_blank">https://secure.avaaz.org/campaign/en/hiring/#op-385847-security-engineer</a></p><div style="margin:1.4em 0px 8px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:22px;line-height:26px;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">What the position involves</div><p style="margin:0px;padding:0.8em 0px 0.25em;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">The Security Engineer will be part of a team that has responsibility for all security aspects of the organization’s technology, systems, communications, and staff. We are seeking a candidate with a strong technical background, hands-on experience implementing security across the full breadth of the technology stack and a strong ability to provide balanced and actionable security solutions for Avaaz.</p><p style="margin:0px;padding:0.8em 0px 0.25em;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Specific responsibilities include:</p><ul style="margin:4px 0px 4px 8px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;list-style-position:outside;color:rgb(26,26,27)"><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Design and implement security solutions across all technology that Avaaz runs.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Align security of Avaaz applications and infrastructure to security best practices.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Provide continued compliance of the organization with applicable security and data protection standards (e.g. GDPR).</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Provide security advice on proposed new technologies, projects and campaigns.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Perform security monitoring/operations tasks and incident response.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Identify new security solutions and tools to improve Avaaz security.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Assist in user security education and security awareness training and campaigns.</p></li></ul><div style="margin:1.4em 0px 8px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:22px;line-height:26px;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Our ideal candidate will have these skills/experience</div><ul style="margin:4px 0px 4px 8px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;list-style-position:outside;color:rgb(26,26,27)"><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Familiarity and solid knowledge of how cloud-hosted modern web applications are designed, built and deployed. In particular, design-level and hands-on implementation experience with AWS and GCP.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Experience in designing and implementing solutions to protect applications, networks and infrastructure from threats.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Strong Python and shell scripting skills, primarily with the focus of implementing security solutions and automating security processes.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Solid understanding of zero trust network/BeyondCorp principles and designing security solutions that follow those principles.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Ability to look at a new technology or project and then quickly apply security principles/best practices to make prioritised recommendations to secure the technology/project</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Highly flexible with rapidly-shifting needs and priorities</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Delivery-oriented with high attention to detail and without paralyzing perfectionism</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Ability to deliver complex technical subjects to technical and non-technical audiences.</p></li></ul><div style="margin:1.4em 0px 8px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:22px;line-height:26px;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Bonus points for having these skills/experience</div><ul style="margin:4px 0px 4px 8px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;list-style-position:outside;color:rgb(26,26,27)"><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Experience performing security monitoring/operations (SIEM, WAF, IDS, log analysis, etc.)</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Broad application security exposure (across secure coding and architecture, common application security vulnerabilities, threat modeling, and/or vulnerability management)</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Familiarity identifying and deploying technologies that enable secure online communications.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Experience in providing security advice/consulting for technology projects (either internal or external to an organisation)</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Experience in security configuration of computers and mobile devices. In particular, strong macOS, Android and iPhone management, security and troubleshooting experience.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Exposure to security incident response processes and execution.</p></li><li style="margin:0.4em 1em;padding:0px;border:0px;font:inherit;vertical-align:baseline"><p style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline">Experience in engaging and managing external vendors to conduct security testing and managing remediation of vulnerabilities.</p></li></ul><div style="margin:1.4em 0px 8px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:22px;line-height:26px;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Where to apply</div><p style="margin:0px;padding:0.8em 0px 0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Apply here: <a href="https://secure.avaaz.org/campaign/en/hiring/#op-385847-security-engineer" rel="noopener nofollow ugc" style="margin:0px;padding:0px;border:0px;font:inherit;vertical-align:baseline" target="_blank">https://secure.avaaz.org/campaign/en/hiring/#op-385847-security-engineer</a></p><p style="margin:0px;padding:0.8em 0px 0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:14px;line-height:inherit;font-family:"Noto Sans",Arial,sans-serif;vertical-align:baseline;color:rgb(26,26,27)">Thanks,<br>Matthew</p></div>
</div></div>