Databases are the beating heart of every business in the world.

Cockroach Labs is the team behind CockroachDB, an open source, distributed SQL database. In addition to the open source version of the DB we are proud to offer our self-service, fully managed cloud offerings of CockroachDB with Dedicated & Serverless options. We aim to build infrastructure that keeps pace with the world, so developers can focus on what matters most: building the best products. Join us on our mission to enable every developer to build world-changing applications. 

About the Role

Cockroach Labs is looking for a passionate individual to join our Corporate Engineering team to focus on our security efforts. This is a hands-on & multi-functional role where youll be working with different teams across the company on a variety of projects related to security.

This role is focused on company-facing security work, focusing on all aspects of IT security including, endpoint security, office infrastructure, data loss prevention, compliance reviews, & more.

In this role, youll also have an opportunity to make a significant impact by helping establish the culture & practices for security engineering at Cockroach Labs.

You Will

• Work with our IT team to monitor & respond to security alerts.
• Architect, configure, & maintain security systems, including Crowdstrike Falcon & CASB solutions, to protect sensitive data & ensure secure access controls.
• Manage security within Google Workspace & our email security platform.
• Manage IAM with Okta, create access control policies, ensure proper implementation of least privilege & RBAC across internal & SaaS applications. 
• Work to continue integrating security tools into CRL SIEM, develop detections based on usage & audit logs, manage & triage detections & alerts. Build automations for triaging alerts & remediating issues. 
• Perform regular security assessments & audits to identify risks & vulnerabilities, triage found risks appropriately,  then design controls to implement as corrective actions.
• Lead incident response efforts, including investigation & remediation of security breaches.
• Create policy, workflows, & best practices for the Corporate Engineering Team & the company at large.
• Work with the compliance team to conduct third party SaaS security reviews & support other compliance initiatives such as SOC 2 & GDPR.
• Build internal security culture by leading internal security awareness & training programs.
• Spearhead Corporate Security initiatives, plan projects & track their progress.
• Be a part of the Corporate Security on-call rotation.
• Collaborate with application security, cloud security , & compliance teams on ongoing projects. 

You Have

• 5+ years of experience in a Security Operations/IT security position
• 2+ years of hands-on experience as an administrator on some or all of the following types of tools: EDR, MDM, SIEM, Okta, Google Workspace, EntraID,& CASB solutions.
• 2+ years experience as an administrator of various enterprise SaaS applications. 
• A strong understanding of standard corporate IT systems such as office networks, physical security systems, email & DNS configuration, file sharing systems, etc. 
• Experience independently managing short & long term projects.
• Knowledge of security & compliance frameworks like NIST, SOC2, ISO270001, PCI-DSS.
• Experience performing risk assessments, gap assessments, & threat modeling. 
• A strong understanding of networking concepts, application security, authentication & authorization & cloud security best practice.
• Strong knowledge of overall security concepts & best practices. 
• Experience with creating automations, using a scripting language like python, nice to have.
• Experience with cloud platforms such as AWS, GCP, Azure nice to have.
• Relevant security certifications such as Sec+, CISSP, preferred but not required.

Expectations

In your first 30 days, you will become an integrated member of our Corporate Engineering Team. Youll become familiar with our identity management, fleet management, & endpoint security system. We believe that it's essential for you to take this first month to become familiar with our technology, processes & our company.

In your second month, youll begin to audit our infrastructure & policies. You will offer to make improvements, streamlining pain points & hardening our security posture.

In your third month, youll be leading processes to monitor & respond to security events from our security monitoring systems, & will take ownership of reporting & following up on these. You will work to implement new tool deployments & lower DLP while improving security posture across the firm.

The Team

In addition to your reporting director, you will work closely with senior management.

Reporting to Richard Dachtera - Senior Manager, Corporate Engineering

Richard is the founding member of the Corporate Engineering team at Cockroach Labs. Over the last two & a half years hes owned every aspect of the organization. He helped bring the company to SOC2 compliance, supported the company during the COVID transition & opened three offices for the company. Before Cockroach Labs he spent five years at Dropbox as their founding Corporate Engineer hire in New York & then Seattle. Outside of work hes an avid photographer, with rolls of film easily found in his coat pockets. Also Richard is the unofficial photographer for the company, volunteering his time to take headshots for all employees.

Mike Geehan  - Senior Director of Security

Mike Geehan is responsible for the safety & security of CockroachDB Cloud & surrounding infrastructure. Mike joined Cockroach Labs from a DC based start-up, & prior to that spent time in larger tech companies in a wide range of roles. Mike is focused on team development. Enabling & growing his team is paramount to the success of the team, & hence the business as a whole. Mike is based in Houston, Texas, & outside of work is focused on his family, his bikes, & in getting a cycling related non-profit organization off the ground.

Benefits

• Competitive Health Insurance Coverage (for you & your dependents!)
• Paid Parental Leave (with baby bucks)
• Flexible PTO 
• Learning & Development Budget
• Relocation Support (as applicable)

Cockroach Labs is proud to be an Equal Opportunity Employer building a diverse & inclusive workforce. If you need additional accommodations to feel comfortable during your interview process, please email us at accessibility@cockroachlabs.com.

The annual anticipated base salary range for U.S. candidates for this role is USD $125,000 to $170,000, plus commission if a sales role. We set standard ranges for all U.S.-based roles based on function, level, & geographic location, benchmarked against similar stage growth companies. In order to be compliant with local legislation, as well as to provide greater transparency to candidates, we share salary ranges on all job postings regardless of desired hiring location.  Actual salaries may vary & fall outside of this range depending on factors such as a candidates qualifications, geographic location, skills, experience, & competencies. In addition, we are often open to a wide variety of profiles, & recognize that the person we hire may be less experienced (or more senior) than this job description as posted. Salary is one component of the Cockroach Labs total rewards package, which includes stock options, health insurance, life & disability insurance, funds towards professional development resources, flexible PTO, paid holidays, & parental leave, to name a few! Salaries for candidates outside the U.S. will vary based on local compensation structures.