Federal Security & Compliance Engineer at Secure Identity
New York, NY 10001
About the Job
We’re looking for a Federal Security & Compliance Engineer to help us secure the next generation of products that will go beyond just ID and enable our members to leverage the power of a networked digital identity.
As a Security Engineer at CLEAR, you will participate in enhancing the security and compliance of our products throughout the product lifecycle from design, to implementation, testing, and deployment.
We expect you to participate in building our platform - one that interconnects dozens of attributes and qualifications while keeping member privacy and security at the core. A brief highlight of our tech stack:Java / Javascript / React / Typescript / Python / PostgresAWS cloudWhat you'll do:Work side by side with engineering and product resources to define security and compliance requirements for new features and servicesBuild threat models, testing plans, and validation strategies to ensure a high secure bar for the systemReview code, infrastructure, and architecture for common security flaws, as well as bespoke, business logic flawsManage penetration tests of critical featuresAssist in managing audits and compliance requirements on an ongoing basisBridge and facilitate communication between engineering teams and other parts of the Security organizationWhat you're great at:5+ years of experience working as a security engineerYou understand how to analyze a system and look for potential threats at every stage of the SDLC.
You have experience with system design reviews, threat modeling, and common vulnerabilities in Web and Mobile applicationsHands-on experience with cloud-based architectures, especially those built on AWS, Kubernetes, and DockerSolid understanding of networking and operating systemsYou can write scripts, and you are proficient in one (or more) of the following languages: Java, Javascript, PythonYou have excellent analytical skills, strong organizational and project management skills, and the ability to prioritize and manage multiple tasks and deadlines.You are a strong communicator who can explain security concepts to a variety of audiences and levels, as well as work collaboratively across technical and non-technical teamsYou are comfortable with high levels of autonomy and delivering on complex goalsYou have experience with regulatory and compliance frameworks like NIST 800-53, PCI DSS, and FedRAMP, as well as Identity and Authenticator Assurance Levels like IAL2 and AAL2How You'll be Rewarded:At CLEAR we help YOU move forward - because when you’re at your best, we’re at our best.
You’ll work with talented team members who are motivated by our mission of making experiences safer and easier. In our offices, you’ll enjoy benefits like meals and snacks.
We invest in your well-being and learning & development with our stipend and reimbursement programs. We offer holistic total rewards, including comprehensive healthcare plans, family building benefits (fertility and adoption/surrogacy support), flexible time off, free OneMedical memberships for you and your dependents, and a 401(k) retirement plan with employer match.
The base salary range for this role is $175,000 - $215,000, depending on levels of skills and experience.The base salary range represents the low and high end of CLEAR’s salary range for this position.
Salaries will vary depending on various factors which include, but are not limited to location, education, skills, experience and performance.
The range listed is just one component of CLEAR’s total compensation package for employees and other rewards may include annual bonuses, commission, Restricted Stock UnitsAbout CLEARHave you ever had that green-light feeling? When you hit every green light and the day just feels like magic.
CLEAR's mission is to create frictionless experiences where every day has that feeling.
With more than 25+ million passionate members and hundreds of partners around the world, CLEAR’s identity platform is transforming the way people live, work, and travel.
Whether it’s at the airport, stadium, or right on your phone, CLEAR connects you to the things that make you, you - unlocking easier, more secure, and more seamless experiences - making them all feel like magic.CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs.
Please let us know if you require a reasonable accommodation to apply for a job or perform your job.
Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.#LI-Onsite
As a Security Engineer at CLEAR, you will participate in enhancing the security and compliance of our products throughout the product lifecycle from design, to implementation, testing, and deployment.
We expect you to participate in building our platform - one that interconnects dozens of attributes and qualifications while keeping member privacy and security at the core. A brief highlight of our tech stack:Java / Javascript / React / Typescript / Python / PostgresAWS cloudWhat you'll do:Work side by side with engineering and product resources to define security and compliance requirements for new features and servicesBuild threat models, testing plans, and validation strategies to ensure a high secure bar for the systemReview code, infrastructure, and architecture for common security flaws, as well as bespoke, business logic flawsManage penetration tests of critical featuresAssist in managing audits and compliance requirements on an ongoing basisBridge and facilitate communication between engineering teams and other parts of the Security organizationWhat you're great at:5+ years of experience working as a security engineerYou understand how to analyze a system and look for potential threats at every stage of the SDLC.
You have experience with system design reviews, threat modeling, and common vulnerabilities in Web and Mobile applicationsHands-on experience with cloud-based architectures, especially those built on AWS, Kubernetes, and DockerSolid understanding of networking and operating systemsYou can write scripts, and you are proficient in one (or more) of the following languages: Java, Javascript, PythonYou have excellent analytical skills, strong organizational and project management skills, and the ability to prioritize and manage multiple tasks and deadlines.You are a strong communicator who can explain security concepts to a variety of audiences and levels, as well as work collaboratively across technical and non-technical teamsYou are comfortable with high levels of autonomy and delivering on complex goalsYou have experience with regulatory and compliance frameworks like NIST 800-53, PCI DSS, and FedRAMP, as well as Identity and Authenticator Assurance Levels like IAL2 and AAL2How You'll be Rewarded:At CLEAR we help YOU move forward - because when you’re at your best, we’re at our best.
You’ll work with talented team members who are motivated by our mission of making experiences safer and easier. In our offices, you’ll enjoy benefits like meals and snacks.
We invest in your well-being and learning & development with our stipend and reimbursement programs. We offer holistic total rewards, including comprehensive healthcare plans, family building benefits (fertility and adoption/surrogacy support), flexible time off, free OneMedical memberships for you and your dependents, and a 401(k) retirement plan with employer match.
The base salary range for this role is $175,000 - $215,000, depending on levels of skills and experience.The base salary range represents the low and high end of CLEAR’s salary range for this position.
Salaries will vary depending on various factors which include, but are not limited to location, education, skills, experience and performance.
The range listed is just one component of CLEAR’s total compensation package for employees and other rewards may include annual bonuses, commission, Restricted Stock UnitsAbout CLEARHave you ever had that green-light feeling? When you hit every green light and the day just feels like magic.
CLEAR's mission is to create frictionless experiences where every day has that feeling.
With more than 25+ million passionate members and hundreds of partners around the world, CLEAR’s identity platform is transforming the way people live, work, and travel.
Whether it’s at the airport, stadium, or right on your phone, CLEAR connects you to the things that make you, you - unlocking easier, more secure, and more seamless experiences - making them all feel like magic.CLEAR provides reasonable accommodation to qualified individuals with disabilities or protected needs.
Please let us know if you require a reasonable accommodation to apply for a job or perform your job.
Examples of reasonable accommodation include, but are not limited to, time off, extra breaks, making a change to the application process or work procedures, policy exceptions, providing documents in an alternative format, live captioning or using a sign language interpreter, or using specialized equipment.#LI-Onsite