Sr. Security Engineer (program experience required)
Aha! is a different kind of high-growth SaaS company. We are the world's #1 roadmap software and help people achieve their best. Over 5,000 enterprises and 500,000 product, innovation, and engineering leaders trust our software to build lovable products and be happy doing it. We are self-funded, highly profitable, always distributed, and have no sales team. Being an always-remote company means we can hire intrinsically motivated people who love to learn, support their teammates, and want to work from where they are happiest.
Aha! engineering is a mid-sized, fully remote team that is highly productive. We are centered around North American time zones so we can collaborate during the workday.
We move quickly: We ship code multiple times a day. We believe in getting new features in front of customers and iteratively improving as we learn what works and what does not.
We collaborate: We each bring unique experiences and skills to the table. Working together to share that knowledge benefits the entire team and helps us produce the best results for our customers.
We value product over process: We want the team to have the time and focus to solve complex challenges. We aim to minimize the overhead introduced by heavyweight processes and excessive meetings.
Our security program
Our web application is a single-instance, multi-tenant Ruby on Rails monolith supported by Postgres (database), Redis (background jobs), and memcached (Rails caching). We run it in a dedicated Amazon Web Services environment with multiple layers of security controls.
Our information security management system (ISMS) is ISO 27001 certified to demonstrate our commitment to security to our customers. We undergo annual third-party ISO 27001 audits and third-party application penetration testing with excellent results. We continually improve our security controls to meet and exceed our customer security expectations.
We embrace new technologies that help us deliver a lovable product, but we also remain cognizant of the maintenance overhead that a new technology or platform brings. We solve the problems in front of us rather than prematurely optimizing to address issues that may never materialize.
We do most of our planning and collaboration in Aha! Roadmaps and built Aha! Develop so that software engineers and their teams could take advantage of those same rich features. We use Slack and Zoom for video calls. (Email? Rarely.)
We believe that being a kind person who elevates the rest of the team is just as valuable as writing great code. You have strong problem-solving skills and experience working on important functionality for a cloud-based product. You are humble, eager to learn, and always willing to help others learn as well. You want to work with people who enjoy picking up a problem and solving it, regardless of the technologies and techniques involved.
The Aha! security team is part of the engineering team and is product focused. As a Senior Security Engineer focused on our security program, you can expect to spend the majority of your time working with security controls, policies, risk reduction, and customer security questions.
Your work at Aha!
We implement and maintain security controls across the entire company with a deep focus on our product. As Sr. Security Engineer, your work will include:
Operating and improving our security controls implemented as part of our ISO 27001 certification
Performing and reviewing system and vulnerability scans with a focus on application security
Collaborating with business stakeholders to perform risk assessments and treatments
Driving security and privacy initiatives, training, and features to reduce risk
Updating, maintaining, and creating security and privacy policies
Responding to customer security questions and requirements
Preparing for and representing Aha! in external ISO 27001 audits
Participating in security monitoring, incident response, and investigations
If the Sr. Security Engineer role sounds appealing, we would love to hear from you. (A real human reviews every application.)
Grow with us
Everyone deserves to reach their fullest potential. We know that when we do work that matters with people we care about in a high-growth environment, we feel engaged and alive. And our goal is to help you do just that. We offer all the benefits you would expect and more, including profit sharing. The specific benefits listed below are reflective of what we offer U.S.-based hires. We also do our best to extend identical benefits to international teammates.
Generous salary with annual profit sharing for all
Medical, dental, and vision plans — for many teammates, we cover 100 percent of the premiums
Up to 200 hours of paid time off a year to spend however you want
30 to 90 days of paid parental leave and five to 10 days of paid care and bereavement leave
Up to $1,000 annually for third-party education, along with paid time off to immerse yourself in learning
Aha! contributes a percentage of your total compensation each year towards your retirement
We are building a distributed team, and you can work from anywhere in North America or South America for this role. We offer generous salary, equity, benefits, and a profit-sharing program. See other openings at Aha!
We are committed to hiring, promoting, and compensating employees based on their qualifications and demonstrated ability to perform job responsibilities. As an equal opportunity employer, Aha! welcomes all employees and applicants, without regard to age, race, color, national origin, physical or mental disability, gender, religion, sexual orientation, gender identity, marital or veteran status, condition of pregnancy, or any other legally protected characteristic. Learn more about diversity and inclusion at Aha!