Information Security Specialist
Created:
Jul 19, 2023, 9:50 PM
Location
Tel Aviv, Israel
Organization
Description
About The Position
Guesty is the industry-leader Vacation-Rental Property Management Software, designed to help property management companies in the short-term rental industry run their business easily by providing an end-to-end solution to all their daily needs. With Guesty, users can manage their listings across multiple websites (such as Airbnb, Booking.com, Expedia, and more), sync all their calendars, manage staff, and more.
Our Security team is growing and we're looking for a SecOps Engineer to join us!
In this role, you will play a crucial role in a global team driving huge-scale live production sites 24X7 and gaining a deep understanding of security and availability.
Responsibilities
In this role, you can make a real impact on the way Guesty works and have the opportunity to improve its security posture. This will include:
- Working with the security manager to plan, implement, manage, monitor, and upgrading security measures for the protection of the organization's data, systems, and networks.
- Responsible for security-related controls such as: ZTNA SASE, IDP and IAM, Email Security, DLP, SIEM, Endpoint Security, CSPM, etc.
- Responsible for security-related processes such as vulnerability management, SaaS security posture management, SSDLC processes, etc.
- Ensure systems are constantly patched, updated, and properly configured.
- Responding to system and/or network security breaches.
- Participating in the change management process.
- Daily administrative tasks, reporting, and communication with the relevant departments and stakeholders.
Develop processes for improving operational security efficiencies, as well as identify/implements automation opportunities for existing manual processes.
Requirements
- At least 2-3 years of hands-on experience in security operations and security engineering in medium-large SaaS/Cloud environments.
- Strong security background (understanding security industry standards and best practices, risk assessment, legal & regulatory requirements, threats, vulnerabilities, security policies etc.)
- Hands-on experience with planning, implementing, and maintaining security solutions and associated processes such as: EDR/XDR, SIEM, XSOAR, IAM, ZTNA SASE\VPN, FW, DLP, Email Security, WAF, vulnerability management, CASB, PAM, etc.
- Hands-on experience with planning, implementing and maintaining cloud security controls.
- Strong problem-solver who can conceptualize the big picture as well as fine details
- Ability to prioritize, mitigate and react to an environment with rapidly changing demands/priorities
- Excellent interpersonal and effective people leadership skills.
- Fluent English (both speaking and writing)
- Experience in service automation using scripting tools (Python/Bash/Terraform) - would be an advantage
- Possess professional certifications such as CISSP/Security+/SANS/GIAC or other relevant security qualifications would be an advantage.
Guesty is proud to be an Equal Opportunity Employer. We provide equal employment opportunities to all employees and applicants regardless of any characteristic protected by law.