About Us:

Eightfold was founded with a vision to solve for employment in our society. For decades, the connection between individuals and opportunities has been based on who they are and their network's strength vs. their potential. Eightfold leverages artificial intelligence to transform how to think about skills and capabilities for individuals and how jobs and career decisions are made. Eightfold offers the industry’s first AI-powered Talent Intelligence Platform to transform how organizations plan, hire, develop and retain a diverse workforce, enabling individuals to transform their careers.

To date, Eightfold AI has received more than $410 million in funding and a valuation of over $2B from leading investors to further our mission of finding the right career for everyone in the world. If you are passionate about solving one of the most fundamental challenges of our society - employment, working on hard business problems, and being part of an amazing growth story - Eightfold is the place to be!

What you will do -

As an Engineering Leader of Product Security role, you will lead a security team responsible for Eightfold’s product and infrastructure security.

As both a leader and individual contributor, you are a hands-on leader responsible for leading the product security efforts across our entire product line. This role requires a unique blend of real-world experience and theoretical knowledge in various aspects of software security, including but not limited to application security, cloud security, secure coding practices, and security architecture.

You will have a proven track record of hands-on security work and have led a team of security professionals. You are an effective communicator who can articulate solutions for complex problems in a simple way, adjusting your communication style to the intended audience, whether it be customers, engineers or other leaders.

Responsibilities

Provide guidance and tools to developers that help prevent the authoring of vulnerabilities.
Build automation (static and dynamic analysis) and frameworks with software engineers that enable Eightfold to scale consistently across all of our products.
Conduct hands-on security assessments (including penetration testing), including threat modeling, vulnerability analysis, code reviews and risk assessments for all products in the Eightfold platform.
Support continued compliance with SOC2, ISO, FedRamp, DOD IL4 and other currently required standards and act as Product and Engineering technical lead. Ensure operation of related controls. Coordinate the collection and submission of required evidence for audits.
Lead incident response activities and post-mortem analysis for any security breaches or incidents, liaising with the Legal, Security and Privacy teams on data protection, ensuring root causes of such breaches are understood and addressed.

Technical Design and Development

Design, build, ship and maintain security focused features that are at the core of Eightfold.
Modify Eightfold’s existing software system using modern programming languages like Javascript, Python to fix security issues as needed.
Diagnose problems around web application security and design appropriate technical solutions.
Be hands-on, get into the ground-level technical details for any reported security vulnerabilities and remediation designs.
Conduct team members’ code reviews and design reviews ensuring code is highly performant, secure and scalable.

Team Leadership

Lead a team of software engineers and security engineers by setting short and long-term goals and success metrics.
Mentor/coach other engineers to help them perform at their best.
Set technical direction and standards across the team, including serving as a senior engineer for code reviews and best practices.
Actively participate in interviewing and hiring new talent.
Manage engineers reporting to you directly, meeting with them regularly to ensure they are meeting their goals and helping with their career development.

Cross-Functional Team & Project Management

Collaborate and coordinate with other engineering teams and leaders to ensure security best practices are followed across the organization.
Be responsible for delivery of products and features shipped by your team.
Instill industry best practices and participate in internal/external technical presentations.
Prioritize, plan projects and features, manage risk and track external commitments.

Other

Work with customers directly around reported security issues, articulate roadmap and provide reassurance around remediation, timelines and best practices.
Be at the forefront of the latest technologies, strategies and developments around security and introduce them internally to the team.

Requirements

Strong expertise in software engineering best practices
Strong knowledge of security best practices, threat modeling, risk assessment, and vulnerability management.
Strong experience in product security, application security or related
Deep understanding of security principles, techniques, and technologies
Practical knowledge of security technologies, especially those applying to SaaS Web applications
Ability to provide strategic product security mentorship based on experience performing threat modeling and design reviews to assess security implications and requirements
Expertise in secure coding practices and familiarity with programming languages such as Python, C/C++, Java, or similar.
Excellent problem-solving skills and the ability to work effectively under pressure.
Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.
BS/MS/PhD in Computer Science or related field is preferred, or equivalent experience
Min of 2+ years of experience in a team management role
MIn of 2+ years of experience in a prior/current Software development role
Strong written and verbal communication skills, with high attention to detail
Ability to communicate with empathy when delivering constructive feedback to engineers

We are a team of self-starters who excel in their fields. We believe in giving you responsibility, not a task. We want you to have ownership and pride in your work and see your work's positive impact on your colleagues, our customers, and the world. We believe in providing transparency and support so you can do the best work of your career.

Hybrid Work @ Eightfold: We embrace a hybrid work model that aims to boost collaboration, enhance our culture, and drive innovation through a blend of remote and in-person work. We are committed to creating a dynamic and flexible work environment that nurtures the collaborative spirit of our team. Starting February 1, 2024, employees residing near Santa Clara, California, or our Bangalore and Noida offices in India will return to the office twice a week.

Eightfold.ai provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, or disability.