About the Department

The Customer Support Team solves complicated problems and answers technical inquiries via phone, email, chat, and social media. Whether it is a Wordpress blogger using our services for free or a global Enterprise business with petabytes of web traffic, our team is always eager to assist. We are the eyes and ears of Cloudflare, acting as the real-time voice of the customer to help communicate their needs and real-world use cases back to the rest of the company - to help build a better service and future product development.

What You’ll do

Do you love solving complex technical problems and interacting with people? Are you passionate about helping customers and are a standout colleague? Cloudflare is seeking an experienced Network Security Engineer to join our team and support our largest and most technically sophisticated customers in resolving technical problems, threats or attacks on their infrastructure at OSI Layers 3, 4, and 7. This will span the range of Cloudflare products from Magic Transit Infrastructure Protection, Argo Smart Routing, DDoS mitigation and Network Firewall, to using the Web Application firewall (WAF), Spectrum and Rate Limiting to help customers.

Skills, Knowledge, and Experience

• Fluent English speaker is a requirement
• Minimum 3 years working within a Technical Support team solving various technical issues 
• Self-driven and capable of learning new technologies / systems / features with little guidance
• Fundamental understanding how the Internet works (OSI Model)
• Advanced understanding of internet protocols like TCP and UDP
• Computer Networking fundamentals, experience with iptables and looking glass
• Experience troubleshooting network connectivity issues, BGP routing, and GRE tunnels
• Packet capture analysis
• Experience in command line and tools, including curl, dig, traceroute, openssl, git
• Experience troubleshooting DNS, SSL / TLS, HTTP
• Experience in a web development and / or hosting environment such as installing and configuring web servers like Apache, Nginx, Caddy and IIS
• Experience writing scripts in Bash, Python, JavaScript or other scripting language
• Experience in working as part of a team in a customer-facing role

Responsibilities

• Communicate with customers via chat, email, and phone 
• Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
• DDoS mitigation for OSI layers 3,4, & 7: advise customers on how to filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blocklisting, allowlisting, and rate limiting
• Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation when applicable
• Work with Engineering and Product teams to improve products and tools

Availability and Schedule Requirements

• Flexibility to work varying work schedules including; Tuesday through Saturday, Sunday through Thursday, holidays, weekends, more than 5 days in a row, or additional hours on occasion.

Bonus Points

• You are familiar with Cloudflare and are actively using our platform
• You have worked with PostgreSQL, MySQL, MS SQL, and other database servers
• You are fluent and can troubleshoot in other languages beyond English and Spanish

This is Engineering at Lattice

Lattice’s Engineering team continuously works to better our product and our craft. We use a modern, cutting-edge tech stack and love experimenting with new technologies. We strive for maintainable, robust, and performant code. We’re highly collaborative and continuously iterative and work closely with designers and product managers. We prioritize not only great technical architecture but also an amazing product experience.

Lattice is looking for someone interested in taking on complex challenges in a fast-paced, collaborative environment and directly impacting the architecture of our cloud platforms, the maturity of our cloud security posture, and our security monitoring and investigative capabilities. 

Who you are

You have 10+ years of professional experience in cloud infrastructure development with AWS, containerization, and orchestration, as well as a deep understanding of security concepts and principles, including encryption, authentication and authorization, least privileged access, and security monitoring and incident response.

• You have an advanced understanding of software and security architectures
• Deep experience in performance, reliability, monitoring, and incident response
• Proficiency in coding and scripting - including experience with either TypeScript or JavaScript
• Very strong interpersonal skills - must be able to demonstrate an ability to work well with other non-technical members of the team.
• You seek out the root cause of problems when investigating a security concern, or security incident, and champion improvements over time that will prevent future issues.

You are a great communicator and collaborator.

• You take care to architect and implement solutions that your colleagues will be able to comprehend, own, and maintain.
• You are clear and concise in explaining your thought process and in enumerating the tradeoffs made in your recommendations and in your own work.
• You work well with platform engineering, as well as product managers, to come up with optimal solutions.

You enjoy taking an engaged role in the development process.

• You love mentoring and guiding other software and security engineers who are newer to the industry.
• You have experience spearheading planning and delivering the development roadmap for software projects.

You like variety and take pleasure in addressing problems for internal and external customers.

• You enjoy working with a diverse set of stakeholders, tools, and partner to build and enhance foundational features.
• You can identify and mitigate the risks inherent in foundational development work.
• You grasp operational difficulties and devise and create maintainable, scalable solutions to them.

Responsibilities

The mission of the Lattice Security team is to enable the business, reduce organizational risk, and build customer trust by proactively identifying, assessing, and mitigating security and compliance risks in the organization, cloud infrastructure, and product.  

• Provide technical assessments, enhancement opportunities, and process optimizations for the Lattice security monitoring, alerting, and security incident response program
• Provide technical leadership, and guidance in the secure design, implementation, and maintenance of our cloud infrastructure and key platform services.
• Collaborate with cross-functional teams to drive innovation and increase security, confidentiality, data integrity and privacy, and site reliability.
• You will work with other engineers across a modern tech stack. Our current stack includes React, Relay Modern, GraphQL, Node, and PostgreSQL. We rely on AWS to host our infrastructure.
• Your work will directly boost Lattice’s bottom line through EPD enablement, risk reduction, and support in building and bolstering customer trust - resulting in reduced customer churn, increased customer satisfaction, and enhanced customer ARR.

--

The estimated annual cash salary for this role is $181,500 - $281,000. This position is also eligible for incentive stock options, subject to the terms of Lattice’s applicable plans

Benefits: The Company offers the following benefits for this position, subject to applicable eligibility requirements: Medical insurance; Dental insurance; Vision insurance; Life, AD&D, and Disability Insurance; Emergency Weather Support; Wellness Apps; Paid Parental Leave, Paid Time off inclusive of holidays and sick time; Commuter & Parking Accounts; Lunches in the Office, Internet and Phone Stipend; One time WFH Office Set-Up Stipend; 401(k) retirement plan; Financial Planning; Learning & Development Budget; Sabbatical Program; and Invest in Your People Fund

*Note on Pay Transparency:

Lattice provides an estimate of the compensation for roles that may be hired as required by state regulations. Compensation may vary based on (a) location, as Lattice factors in specific location when benchmarking compensation for most roles; (b) individual candidate skills and qualifications; and (c) individual candidate experience.

Additionally, Lattice leverages current market data to determine compensation, so posted compensation figures are subject to change as new market data becomes available. The salary, other compensation, and benefits information is accurate as of the date of this posting. Lattice reserves the right to modify this information at any time, subject to applicable law.

#LI-remote

About the Role:

The Tubi Security team is responsible for securing Tubi and Adrise applications and infrastructure. As a member of the Tubi Security team, the Staff Cloud Security Engineer will be responsible for securing the cloud infrastructure of both applications. Candidates for this should have a passion for reducing security risks in a cloud environment while building great partnerships with key stakeholders and engineers. 

Responsibilities:

• Design, implement, and maintain secure architecture and infrastructure components, including networks, systems, and cloud environments, in accordance with industry best practices and regulatory requirements
• Develop and deploy security controls and monitoring systems to detect and prevent security threats, intrusions, and vulnerabilities
• Conduct and perform security reviews, threat models, and security assessments to identify and remediate security weaknesses
• Build automation and tools for security fixes and policy enforcement
• Participate in incident response, red/blue team exercises, and vulnerability triage 

Qualifications:

• 8+ years of experience in cybersecurity with a focus on cloud and infrastructure security
• Deep understanding of cloud security architecture (AWS preferred) and network security
• Hands-on experience with SIEM, WAF and DDOS prevention tools
• An understanding of security best practices, frameworks and principles such as OWASP Top 10, NIST CSF, SLSA Framework, and zero-trust
• Great understanding of modern cloud technology components and deployment pattern such as containers, Kubernetes, infrastructure as code, etc
• Experience performing threat models and risk assessments
• Familiarity with compliance and privacy regulations such as SOX and GDPR
• Excellent communication and problem solving skills with proven ability to collaborate effectively with technical and non-technical stakeholders

#LI-MQ1 

Meet the Team:

As the Safety and Cybersecurity Team, we contribute to a key area of Torcs products. We ensure that the product is designed considering the state of the art in safety and cybersecurity for road vehicles building on standards like ISO26262, ISO21448 and ISO21434. 

What you will do:

• Provide strong cyber security systems engineering processes and methods to ensure optimum protection of Torc systems from cyber threats, working across teams involved with development and commercialization of software, hardware and infrastructure
• Lead cyber security activities for Torc in compliance with ISO 21434, UNECE WP.29, and Torc cyber security development processes in collaboration with external teams
• Lead the Threat Analysis and Risk Assessment (TARA) in collaboration with the functional safety team and lead the team for TARA updates. Base the TARA on the safety goals found in the ISO 26262 HARA
• Lead the security concept development as well as the security requirements development and requirements review 
• Collaborate with system design and architecture development teams on specification development for our Autonomous Trucking program.  Support the systems team in developing the security architecture for product lines  
• Coach teams in implementing the cyber security requirements and provide guidance and support for the incident response team and support incident response activities as assigned 
• Interface and drive implementation of cybersecurity concept in design phase and cultivate awareness of incident response in the engineering team and grow the cyber security culture 
• Support the development of cyber security requirements for autonomous trucks
•  Based on the performed product cybersecurity activities you prove the compliance with ISO/SAE 21434 withing a security case
• Track cyber security issues and support activities for their closure (vulnerability management) 

What you will need to succeed:

• Bachelor's degree in Systems Engineering, Computer Science, Electrical Engineering, Robotics, or related field
• Experience developing cybersecurity requirements
• Strong understanding of ISO 26262 and 21434 
• Minimum 10 years of experience in an engineering related field
• Complex hardware knowledge and expert software knowledge
• Communication technologies and protocols (Ethernet, CAN)
• Low Level OS and Middleware knowledge
• Automotive cybersecurity experience 

Bonus Points!

• Masters degree preferred
• Experience with Autonomous Vehicles or ADAS

Perks of Being a Full-time Torc’r  

Torc cares about our team members and we strive to provide benefits and resources to support their health, work/life balance, and future. Our culture is collaborative, energetic, and team focused. Torc offers:     

• A competitive compensation package that includes a bonus component and stock options  
• 100% paid medical, dental, and vision premiums for full-time employees    
• 401K plan with a 6% employer match  
• Flexibility in schedule and generous paid vacation (available immediately after start date) 
• Company-wide holiday office closures  
• AD+D and Life Insurance

Meet the team:  

As the Safety and Cybersecurity Team, we contribute to a key area of Torc's products. We ensure that the product is designed considering the state of the art in safety and cybersecurity for road vehicles building on standards like ISO26262, ISO21448 and ISO21434. 

What you will do: 

• Provide strong cyber security systems engineering processes and methods to ensure optimum protection of Torc systems from cyber threats, working across teams involved with development and commercialization of software, hardware and infrastructure. 
• Lead cyber security activities for Torc in compliance with ISO 21434, UNECE WP.29, and Torc cyber security development processes in collaboration with external teams 
• Lead the Threat Analysis and Risk Assessment (TARA) in collaboration with the functional safety team and lead the team for TARA updates. Base the TARA on the safety goals found in the ISO 26262 HARA 
• Lead thesecurity concept development as well as the security requirements development and requirements review 
• Collaborate with system design and architecture development teams on specification development for our Autonomous Trucking program.  Support the systems team in developing the security architecture for product lines   
• Coach teams in implementing the cyber security requirements 
• Provide guidance and support for the incident response team and support incident response activities as assigned 
• Cultivate awareness of incident response in the engineering team.  
• Grow the cyber security culture 
• Leadthe Cyber Security Plan 
• Lead the CS process definition andalign to the Automotive SPICE compliant processes at Torc 
• Support the SW cyber security tool qualification process 
• Provide training for ISO 21434 
• Track cyber security issues and support activities for their closure (vulnerability management)  
• Interface with external vendors and suppliers to ensure cyber security compliance 
• Support quality engineering team in answering cyber security related questions
• Continually improve by staying up to date in cyber security technologies
• Support the development of cyber security requirements for autonomous trucks  

What you will need to succeed: 

• Bachelor's degree in systems engineering,computer Science,electricalengineering,robotics, or related field and: 
• Minimum 10 years of experience in engineering or related field 
• Experience working with ISO 21434 
• Complex Hardware knowledge 
• Communication technologies and protocols (Ethernet, CAN) 
• Low Level OS and Middlewareknowledge 
• Ability to read code (C/C++, Python) 
• Automotive industryexperience 
• Distributed and centralized ECUarchitectures 

Bonus Points! 

• Master’s Degree or PhD. Preferred 
• Experience with Autonomous Vehicles or ADAS 

Perks of Being a Full-time Torc’r  

Torc cares about our team members and we strive to provide benefits and resources to support their health, work/life balance, and future. Our culture is collaborative, energetic, and team focused. Torc offers:     

• A competitive compensation package that includes a bonuscomponentand stock options   
• 100% paid medical, dental, and vision premiums for full-time employees     
• 401K plan with a 6% employer match   
• Flexibility in schedule and generous paid vacation (availableimmediatelyafter start date)  
• Company-wide holiday office closures   
• AD+D and Life Insurance