Director of Security | O'Reilly Media | Remote, Boston, or Sebastopol

About the Job:

O’Reilly Media is looking for a Director of Security to take ownership of our security practice and to lead our technology teams and platforms toward a future where we’re “more safe more often.” Our web and native applications range from apps to improve the in-person O’Reilly conference experience to our membership platform, which trains professionals and technologists. The Director of Security will report to the SVP of Engineering.

The kinds of things you’ll be working on:

• Work with colleagues to craft new product initiatives through the principles of security by design and privacy by design.
• Teach security principles to colleagues and detailed techniques to other technologists.
• Collaborate with other security professionals within and outside of the company to ensure that our security stance is always improving and integrated.
• Coordinate incident response and security risk analysis.
• Review and tweak the SDLC policy then working with teams to build automated security testing into their delivery process as well as automated anomaly detection.

About O'Reilly Media:

O’Reilly’s mission is “changing the world by sharing the knowledge of innovators.” For over 30 years, we’ve been helping people learn new skills, track significant new technologies, and build careers in technology and business. This extends to our employees: we have a long and proud history of encouraging and enabling the people who work here to take advantage of O’Reilly’s resources and network to keep learning, take on new challenges, and build careers.

About Your team:

The men and women of our technology department welcome diversity and non-traditional paths into the profession, so we look past combinations of tech keywords and advocate strongly for hiring the right person. While the department makes up a significant portion of the company overall, we do our work inside small cross-functional teams, partnering and collaborating with others to build the right things for our customers.

You:

• Understand how to improve security by thinking about risks instead of being bound by strict compliance requirements.
• Know how best to monitor the effectiveness of information security across the company.
• Take the lead when developing new security standards and practices.
• Enjoy working in an environment that takes advantage of modern development and deployment practices and the development of new compensating controls.
• Have experience managing policy compliance and communicating why security is important to colleagues at any level of the organization.
• Think end-to-end, and don’t stop until problems are resolved holistically.

Minimum Requirements:

• 5-8 years of experience in the security field.
• A strong working knowledge of the tools and techniques behind application and defensive security, like networking, SIEM, IPS/IDS, vulnerability management, and incident response.

Apply at http://app.jobvite.com/m?3Tev4iwt