The Company

Our mission at Simple is to radically redesign the consumer banking experience with a focus on beautiful interfaces, transparent policies, modern technology, and extraordinary customer service.

The Job

Simple takes security very seriously. Do you feel driven to help your teammates design, implement and maintain secure software and business processes? Are you comfortable using Burp or Charles (or your favorite proxy) to dive deeply into web application security? Do you enjoy developing, implementing and evaluating n-Tier network architecture and cloud solutions and working to strengthen corporate defenses? Do you like taking on hard problems and building solutions?

We are looking for people like this to help build our information security team. Candidates must live and breathe security. We ideally are looking for candidates who have had information security consulting experience because it demonstrates breadth of knowledge, good communication skills, and willingness to deal with "high-level" problems  such as: employee awareness/education, security architecture review, and operational security.  If you have not formally done any consulting, fret not, we still want to talk to you, especially if you think you have many of the aforementioned qualities as well as some of the following characteristics:

• Proficiency with at least one "high-level" language (multiple preferred): Ruby, Java, Python, JavaScript, Scala, etc.
• Overall understanding of object-oriented programming (functional programming a plus) and the ability to quickly assume knowledge necessary to discuss security issues with developers of languages that you do not yet have experience with.
• Plenty of experience with web application security and web application auditing.
• Familiarity with cloud security concepts and technologies (particularly as they relate to AWS services including EC2, S3 and VPC).
• Familiarity with cryptography, key management, secure protocol design, etc.
• Familiarity with typical corporate security controls (e.g., NIDS/NIPS, HIDS/HIPS, WAF, Network Firewalls, VPN, AV, FDE, SIEM, DLP, etc.)
• Experience with open source security and management tools a big plus (e.g., Bro IDS, OSSEC, ModSecurity, Chef, Git, etc.)
• Plenty of experience with application-level, system-level, and network penetration testing.
• Willingness to perform operational security tasks and to regularly assess policy compliance of various technologies, business processes and controls within the enterprise.
• At least one current security-oriented certification a plus (e.g., CISSP, CISA, CRISC, etc.)

Technical Environment

Our backend developers mostly work in Scala or Java. Our frontend developers mostly work in Javascript and Ruby. In addition, we have written tools or services in Ruby, Python, R, and C. We're comfortable supporting a polyglot environment as long as the team is productive. We use Amazon Web Services, Git, Chef, Jenkins, Redis, Postgres, and more.

We believe strongly in metrics, testing, continuous integration, and working fluidly and harmoniously with our operations and product teams. Everything we write is designed for simplicity and maintainability. We take security very, very seriously.

Our team includes active open source contributors and we hope that you are too (or, at least, that you want to be).

Benefits

We may be a startup, but we offer competitive salaries, great benefits, equity in the company, and a nice budget for your own custom setup. We encourage and subsidize conference participation and continuing education. We believe in work/life balance and fostering a happy workplace.

If you're interested in building the future of personal banking with a group of nice, funny, smart people who love music, math, food, design, coffee, and code, Simple is the place for you.

Location

Simple is located in Portland, Oregon. Relocation assistance is available and remote work is possible.