Security Engineer


Company Type

The Security Engineer will work cross-functionally across departments to perform and improve Ibotta's security posture. This includes the planning, implementation, management, and execution of security processes, documentation, and analytics. The ideal candidate is a curious problem solver, with strong technical skills, and a focus on teamwork.

What you will be doing:

  • Embrace and uphold Ibotta’s Core Values: Integrity, Boldness, Outhustle, Teamwork, Transparency & A good idea can come from anywhere
  • Stand up our SIEM and detection capability
  • Develop our incident response plan
  • Guide IT and Ibotta security processes and systems architecture and implementation
  • Consult with stakeholders to assess and guide security and risk management
  • Identify gaps and propose solutions to increase security efficiency and effectiveness
  • Document system architecture and processes
  • Guide security analytics
  • Train others on InfoSec procedures
  • Coordinate with other members of IT, Legal, and Technology
  • Act as subject matter expert for information and cyber security

What we are looking for:

  • 5+ years of technology experience, inclusive of 3+ years of security experience
  • Bachelor's degree in a STEM field preferred
  • Experience with enterprise logging (Splunk)
  • Experience with Python and data wrangling languages such as SQL or Splunk SPL
  • Experience with Cloud Access Security Brokers (Bitglass)
  • Experience with enterprise endpoint protection systems (CrowdStrike)
  • Strong understanding of networking concepts (IP, Ethernet, DNS, DHCP, VLANs, OSI Model)
  • Familiarity with network IDS/IPS systems (Meraki, Palo Alto.)
  • Familiarity with compliance frameworks such as NIST, CIS, and PCI
  • Familiarity with DevOps tools and concepts (Terraform, version control, etc)
  • Knowledge of Linux, macOS, iOS, and Android
  • Knowledge of AWS security principles
  • Familiarity with Kanban/Agile project management
  • Ability to meet deadlines and adjust to changing priorities
  • Willingness to work in a fast paced and hands-on environment
  • Other Qualifications (preferred):
  • Splunk Enterprise Security Certified Admin
  • Splunk Certified Admin
  • AWS Certified Cloud Practitioner 
  • Offensive Security Certified Professional (OSCP)
  • CompTIA Security+ certification
  • CompTIA CySA+ or CSA+ certification
  • CISM or CISSP certification

About Us:

Headquartered in Denver, CO, Ibotta ("I bought a...") is a free mobile shopping and payments app that has delivered more than $675 million in cumulative cash rewards to its users for making purchases in-store, on mobile apps, or via websites. Launched in 2012, Ibotta has more than 35 million downloads and has become one of the most frequently used shopping apps in the United States. The Ibotta platform provides cash back on purchases at more than 1,500 leading brands and hundreds of retailer partners. In 2019, Ibotta launched its payments solution, Pay with Ibotta™, enabling shoppers to pay for their entire purchase through the Ibotta app and instantly earn cash back. Ibotta was named to the 2019 Inc. 5000 list of fastest-growing private companies in the U.S., after debuting on the list in 2018. The company recently became the first mobile consumer technology company in Colorado to achieve $1B in valuation.

Learn more about Ibotta here:

Additional Details:

  • This position is located in Denver, CO and includes competitive pay, benefits package (including medical,
  • dental, vision), 401k, and equity.
  • Ibotta is an Equal Opportunity Employer. Ibotta’s employment decisions are made without regard with race,
  • color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status,
  • gender identity, sexual orientation, or any other legally protected status
  • Applicants must be currently authorized to work in the United States on a full-time basis.
  • For the security of our employees and the business, all employees are responsible for the secure handling
  • of data in accordance with our security policies, identifying and reporting phishing attempts, as well as
  • reporting security incidents to the proper channels.
Read Full Description
Confirmed 16 hours ago. Posted 30+ days ago.

Discover Similar Jobs

Suggested Articles