Here at Appian, were passionate about automation, speed, & efficiency; & the CIO department is a great place to apply these values! From Information Security, Business Technology, to Solution Engineering, joining Appian will provide you with the opportunity to lead technical strategy, execution & communication for all applications to support Appian employees, customers, & partners across the world. Join us, as we work collaboratively to grow Appian across the world.

Appians information security department is growing & seeking a security engineer to ensure adherence to strong security standards & to assist in automating the detection, reporting & prevention of security risk.  This individual will work in a dynamic environment & be exposed to modern cloud technologies & security frameworks, & become an expert in our global security control environment. 

To be successful in this role, you need to:

• Work with both established & emerging technologies across the business to ensure security risk is identified, quantified, & addressed

• Interact directly with development teams to assess new & evolving solutions & products for strong security implementation

• Identify security impact & related risk within product & infrastructure level designs

• Ensure continuous control implementation & security policy enforcement through risk identification & analysis processes, & by analyzing environments, technologies, & activity patterns

• Identify & prioritize the highest impact areas & help to ensure a high degree of automation & assurance is implemented throughout

• Partner with other security & engineering teams to identify & implement automation through pipeline automation

• Build security analysis programs that operate at scale with minimal impact on developers

• Quantify & communicate risk to management across the business to drive systemic improvements 

Basic Qualifications:

• Bachelors or Master's degree in related field of study

• 5+ years experience in Information Technology (IT) / Information Security or a related field

• Ability to evaluate environments, architectures, & plans against technical requirements to identify gaps or risk against published standards or requirements, & communicate this risk to both technical & non-technical audiences

• Strong capability to learn new technologies & methodologies quickly, & understanding of how to identify related security risk

• Excellent problem solver with a talent for identifying creative solutions to implement policies/standards at scale (preferably as code)

• Ability to work collaboratively with business, security & operational teams

• Self driven & independent learner

• Expertise in one or more risk analysis processes (FAIR, NIST, MITRE ATT&CK, etc.) & understanding of security control requirements (ISO 27001, FedRAMP, NIST, HITRUST, PCI DSS, etc.)

• Strong understanding of & experience in securing workloads & infrastructure on AWS, Azure, or GCP & modern Cloud Native technologies (Kubernetes, Docker, serverless, etc.)

• Experience evaluating architectures & configuration for: effective data protection, proper use of cryptography, network security, authentication & authorization, etc.

• Experience securing operating systems such as Linux, Windows, & macOS environments

• Experience with one or more CI/CD & development cycle security tools (Snyk, semgrep, etc.)

• Experience with scripting or programming languages (Python, Java, etc.)

About Appian

Before Appian was a company, it was an idea. Not about a product or a market, but about the culture needed to sustain innovation & value. Today, we help businesses build apps & workflows rapidly, with a low-code automation platform. 

Appian was founded on the belief that talented & passionate people, given the power & autonomy to excel, will deliver amazing impact. We have worked thoughtfully to create an inclusive, agile & collaborative work environment where employees feel challenged, & all voices are heard. We value & encourage cross-departmental collaboration, & actively seek opportunities to better ourselves & others. Creating impact to us means that when we deliver results, were focused on lasting positive change. 

Join us.

#LI-KC1