Security Engineer (DevSecOps)

Upscend is an innovative AI-powered learning management system designed to ensure learners genuinely master material rather than simply completing courses. By leveraging intelligent automation and data-driven insights, the platform personalizes learning paths and accurately measures skill acquisition. Focused on practical outcomes, Upscend helps organizations efficiently and reliably upskill their teams. As a growing technology company, Upscend offers the chance to work with advanced AI solutions and modern cloud-based architectures, allowing team members to contribute directly to transforming how people learn and retain knowledge.

Key Responsibilities
- Integrate security practices into the software development and operations lifecycle, ensuring security is embedded throughout.
- Design, implement, and maintain security controls across infrastructure, applications, and CI/CD pipelines.
- Perform threat modeling and conduct comprehensive security assessments.
- Review code and configurations to identify vulnerabilities and collaborate with engineering teams to remediate issues.
- Monitor security alerts and manage incident response procedures effectively.
- Support compliance initiatives and promote security best practices across the organization.
- Work closely with developers, operations, and product teams to maintain a secure delivery process.

Required Qualifications
- Strong expertise in Security Engineering and Information Security, with the ability to design and enforce secure architectures and policies.
- Proficiency in Application Security, including secure coding practices, code review, and vulnerability assessments for web and cloud applications.
- Experience with Network Security, such as configuring firewalls, VPNs, network segmentation, and monitoring network traffic for threats.
- Solid understanding of Cybersecurity principles, including threat modeling, risk assessment, and incident response.
- Familiarity with DevSecOps methodologies, CI/CD tools, and automation for security scanning and compliance (e.g., SAST, DAST, container security).
- Hands-on experience securing cloud-native environments on platforms like AWS, Azure, or GCP.
- Knowledge of security standards and frameworks such as OWASP, NIST, and ISO 27001, with practical application experience.
- Strong analytical and communication skills, capable of collaborating effectively within remote, cross-functional teams.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

Preferred Qualifications and Benefits
- Relevant security certifications such as CISSP, CISM, OSCP, or GIAC are highly desirable.
- Opportunity to work remotely in a dynamic and growing technology company focused on cutting-edge AI and cloud solutions.
- Engage with a collaborative team dedicated to transforming learning through secure, innovative technology.

This role offers a unique chance to contribute to a product that revolutionizes learning while ensuring robust security practices are at the core of development and operations.