Senior Cloud Security Engineer

Remote

Apply now

OUR VISION: THE WORLD. SUBSCRIBED.

Customers have changed. They’re looking for new ways to engage with businesses. Consumers today have a new set of expectations. They want outcomes, not ownership. Customization, not generalization. Constant improvement, not planned obsolescence.  

 

In the old world (let’s call it the Product Economy) it was all about things. Acquiring new customers, shipping commodities, billing for one-time transactions. But in today’s new era, it’s all about relationships. More and more customers are becoming subscribers because subscription experiences built around services meet consumers’ needs better than the static offerings or a single product.

 

Our vision is “The World Subscribed” where one day every company will be a part of the Subscription Economy® (a phrase coined by our CEO, Tien Tzuo and author of the best selling book Subscribed).

 

THE TEAM

 

Zuora’s Security teams are responsible for Application & Product Security across our services, Cloud and Data Center infrastructure monitoring, managing internal and external shared services, infrastructure services and more – all with the mission of securing for Zuora’s customer facing SaaS products and platforms. Our technologists sit across US, Beijing, India and remotely, using a follow-the-sun model to provide 24x7x365 coverage for critical functions and partner closely with our Engineering, Customer Support, TechOps, IT, Global Services and Sales teams on a daily basis to keep our customers front and center.

YOUR MISSION:

 

  • Monitor, Detect and Respond to alerts generated by security controls as part of 24×7 delivery team
  • Incident Response, Containment and Remediation handling
  • Analyze, document and report on potential security incidents and perform Threat Hunting for business critical environments
  • Drive, improve and automate all aspects of SOC using custom scripting, and other SOAR platform
  • Write infrastructure as code using CloudFormation or similar. You should see different technologies as a means to an end and be well practiced at hunting for a solution through unfamiliar domains

 

THE OPPORTUNITY (AKA: Why you want this role over any other out there) 

We are looking for a Security Operations Engineer with a passion for detecting cyber security threats, remediate them and prevent occurance of them in the future. Also, automate the manual processes to increase the response time and thus solve security challenges. You will have a chance to apply your skills and passion to improve the security of our product on a daily basis, and make a visible impact by driving metrics, process, and automation for threat monitoring.

 

OUR TECH STACK: Java, Spring, Ruby, Rest APIs, Microservices, Kafka, Spark, NodeJS, AWS, Kubernetes, Terraform, AngularJS, CI/CD tools (e.g. Jenkins, Ansible, Puppet, Terraform, python, go.), SIEM like SumoLogic, Splunk, ELK, SOAR like komand, demisto

 

WHAT YOU’LL ACHIEVE

  • Detect, respond and remediate threats targeting zuora’s products and infrastructure 
  • Build workflows using SOAR to automate various playbooks and processes. 
  • Plan, scope and coordinate various adversarial testing (e.g. external penetration testing).
  • Perform internal penetration tests and participate in internal red team exercises.
  • Drive the evaluation, integration and testing of new security tools and technologies
  • Collaborate with other teams in vulnerability management programs.
  • Write infrastructure as code using CloudFormation or similar.

 

WHAT YOU’LL NEED TO BE SUCCESSFUL

  • 5 years of security experience, specifically on SOC.
  • 10+ years of technology experience.
  • Strong understanding of Network Security, System Security, Web application security, End-point Security including hands-on exploitation skills coupled with defensive skills.
  • Familiarity with infrastructure and systems security domains and automation.
  • Ability to explain complex security issues and their impact to diverse audiences.
  • Be a fast learner and have experience partnering with cross-functional teams. 
  • BA/BS in Computer Science or similar technical degree or equivalent experience

 

RELEVANT TECHNOLOGIES:

  • Modest competency in common scripting and automation languages (Python, Ruby, Golang, etc.)
  • Windows, Linux and Unix based systems
  • Cloud based technologies (e.g. AWS, Azure, GCP)
  • Endpoint Security tools (e.g. Crowdstrike, Carbon black)
  • SIEM (e.g. Sumo Logic, Splunk, Alien Vault) and SOAR (e.g. Phantom, Demisto, Komand)

 

ABOUT ZUORA & OUR “ZEO” CULTURE

Zuora (NYSE: ZUO) Zuora provides the leading cloud-based subscription management platform that functions as a system of record for subscription businesses across all industries. Powering the Subscription Economy®, the Zuora platform was architected specifically for dynamic, recurring subscription business models and acts as an intelligent subscription management hub that automates and orchestrates the entire subscription order-to-revenue process seamlessly across billing and revenue recognition. Zuora serves more than 1,000 companies around the world, including Box, Ford, Penske Media Corporation, Schneider Electric, Siemens, Xplornet, and Zoom.

 

At Zuora, we have one CEO but ​every employee is empowered and supported to be the ‘ZEO’ of their own career experience. By embedding inclusion and belonging into our processes, policies and culture, we are building a workplace where our 1,200+ ZEOs across North America, Europe, and APAC can bring all the elements of who they are into their work. In addition to an industry-leading six-month, 100% paid parental leave for all our ZEOs, we also offer programs to support your mental health and give back to our communities along with “career cash” and plenty of learning and development opportunities.

 

To learn more visit www.zuora.com

 

Zuora is proud to be an Equal Employment Opportunity employer.

Think, be and do you! At Zuora, different perspectives, experiences and contributions matter. Everyone counts. Zuora is proud to be an Equal Opportunity Employer committed to creating an inclusive environment for all.

 

Zuora does not discriminate on the basis of, and considers individuals seeking employment with Zuora without regards to, race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.

 

We encourage candidates from all backgrounds to apply. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to assistance(at)zuora.com.

Apply now


Let’s do this.

You’re unique and we’re on a journey – so let’s embark on a unique journey together. We encourage you to apply to all roles that utilize your skills and ignite the passion within you.

No matter where you’re located, or which team you work on, you’ll be part of a group of people working together to build a better world: The World Subscribed.

Go ahead and apply!

Get to Know Us

Go ahead, take a look inside #ZEOLife. Meet our ZEOs and learn what it’s like to be a part of our team.

Read the Life at Zuora Blog

Choosing to Challenge, Today and Everyday at Zuora

Zuora’s executive team shares their insights on how we can “Choose to Challenge”...

Read more  

Choosing to Challenge, Today and Everyday at Zuora

C-Crets to Advocating for Yourself at Work

Four steps everyone can take to guide their career to the next level while maint...

Read more  

C-Crets to Advocating for Yourself at Work

Highlights from the Subscription Experience 2021

The global Subscribed experience goes virtual in our first ever Subscription Exp...

Read more  

Highlights from the Subscription Experience 2021

Connect with us

All about relationships. Let’s connect!