Information Security Engineer

Overview

Chocolatey Software is seeking an experienced Information Security Engineer with expert-level functional knowledge of strategies that ensure the confidentiality, integrity, and availability of critical data and systems. If you have a comprehensive knowledge of information technology security risks and mitigation strategies, with a keen interest in fostering a culture of information security, we want to talk to you.

Traits for Success

• You exude the qualities and core values of Chocolatey Software, foundational among which are loving automation, striving for simple, teaching others, and being humble.
• You enjoy working as part of a small team to define the direction of the company’s security program through goals and strategy to protect and safeguard company assets, employees, customers, and other stakeholders.
• Researching, identifying, and mitigating security risks is what makes you jump out of bed excited for the day each morning.
• You love making recommendations on security practice improvements and find just as much joy in implementing them.
• You are passionate about understanding the business's direction and goals, and you know how to develop a security framework that supports them.
• You don’t wait to be told what to do–you figure it out and make it happen.
• You are committed to continuously learning and honing your craft.
• You have a security-first mindset, always anticipating the worst that could happen with every decision.

Responsibilities

• Design, implement, and maintain security processes and controls to protect organizational assets and instill confidence in Chocolatey Software.
• Monitor, improve, and assist in creating Key Performance Indicators/Key Risk Indicators to ensure we’re always moving forward.
• Analyze real-time information security threats and lead efforts to mitigate them.
• Collaborate across multiple teams to identify possible risks and create processes to manage them.
• Respond to security-related inquiries from our customers and potential customers.
• Investigate potential security vulnerabilities and take appropriate action.
• Source the necessary hardware and software to implement information security needs.
• Continuously assess the company’s security posture, both formally and informally, and make recommendations on how to improve areas of weakness.
• Oversee the company’s vulnerability management program.
• Provide guidance on securely implementing complex infrastructure systems and processes.
• Evaluate technical implementations of systems and ensure security best practices are being followed.
• Safeguards the business and its assets.
• Research and stay up to date with security trends and changing laws.
• Understand the products inside and out.
• Must be able to lift up to 20 pounds.
• Some travel may be required - about 10%.
• Other responsibilities as assigned.

Competencies

Required

• Knowledge of information security management frameworks, such as ISO 27001, SOC Type 2, NIST, and CIS.
• Minimum of five years’ experience in risk management, information security, or other closely-related field.
• Expertise in risk identification, mitigation, and resolution.
• Experience with risk management and security audits.
• Comprehensive knowledge of IT infrastructure, including networking and complex systems.
• Excellent attention to detail and a drive to strive for perfection.
• Outstanding written communication skills.
• US-based role - must have work authorization - we are unfortunately unable to sponsor at this time.

Preferred

• Bachelor’s degree in information technology systems or a similar field.
• At least one information security certification. CISSP strongly preferred.
• Working understanding of scripting and source code programming languages, such as PowerShell, C#, C++, and Java.
• Proficiency and knowledge of standard corporate software tools, including but not limited to Zoom, Excel, Confluence, etc.

Working for Chocolatey Software

Chocolatey Software is leading the way in how organizations can successfully automate their Windows environments. Chocolatey is a proven software management solution for Windows - hundreds of thousands of users and thousands of organizations, including Microsoft, look at Chocolatey as a solution for rapid deployment and management of software on all supported Windows platforms, including Docker containers and cloud environments.

We often hear that system engineers can spend hours manually deploying and configuring Windows software. Traditional tools are not built for modern automation, and gaining insights and consistency across IT environments is not always easy. Chocolatey for Business (C4B) has helped hundreds of system admins save time, reduce downtime, and accelerate deployments. Chocolatey helps organizations bridge the gap between current approaches and proven DevOps practices.

You will be part of the core team, helping drive greater customer adoption of this game-changing technology. The company is growing fast, and we are focused on everyone at Chocolatey Software to have a real impact on the company and our customers every day. We are driven and focused, and encourage creativity and collaboration.

United States Benefits include

• 5 weeks of PTO
• Medical/Dental benefits after 30 days
• Remote/Flexible work environment
• Employer-sponsored retirement plan w/company match
• Other great benefits!

Job Type:
Full-time

Location:
US-based, remote or onsite (Topeka)

Salary:
$90,000-125,000/year, depending on experience