Senior Security Engineer

<div class="content-intro"><p><strong>Life at Plume</strong></p> <p><span style="font-weight: 400;">At Plume, we believe that technology isn't about moving faster, it's about making life’s moments better. Which is why we’ve built the world's first, and only, open and hardware-independent service delivery platform for smart homes, small businesses, enterprises, and beyond. Our SaaS platform uses WiFi, advanced AI, and machine learning to create the future of connected spaces—and human experiences—at massive scale.</span></p> <p><span style="font-weight: 400;">We now deliver services to over 60 million locations globally and have managed over 3 billion devices on our platform. We’re expanding rapidly, pioneering a new category, and we achieved our Series F funding in just four years. Our customers include many of the world's largest Internet Service Providers (ISPs) who look to Plume to help them evolve their smart home offerings while gleaning insights from their own data. </span></p> <p><span style="font-weight: 400;">With a bias for action and a love for being trailblazers, the team at Plume embodies a combination of relentless curiosity and imaginative innovation. We challenge ourselves to think in ways that other companies don't, work to do what should be done (rather than what can), and if we can’t do it exceptionally well, we don’t do it. It’s how we've assembled a team of world-class builders, thinkers, and doers. And it’s how we’re reinventing what’s possible every day.</span></p></div><p></p> <h4 data-start="51" data-end="132">This is a work-from-office / In-Office role based in our Hyderabad, India location.</h4> <p>Plume develops and deploys cloud based control planes with scale to manage tens of millions of customer homes through some of the world’s largest Internet Service Providers. Our cloud applications include WiFi network management and optimization, device access control, network provisioning, IoT security, and end customer user interaction through mobile apps. </p> <p><strong>The Opportunity:</strong></p> <p>Plume is hiring a security engineer to join the security team to help protect and drive the Plume mission. As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our platforms, and our reputation and brand. Finally, it is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.</p> <p>As a Sr. Security Vulnerability Engineer, you will focus on the technologies that ensure our networks and systems are up to industry and Plume security standards. This role will partner with various engineering, IT and stakeholder groups across Plume to ensure that the technologies and systems we build in-house or purchase are protected in a secure way that minimizes risk.</p> <p><strong>What you will do:</strong></p> <ol> <li>Establish a process to detect, track, prioritize, and report vulnerabilities on organizational information systems</li> <li>Own End to End Vulnerability program, move the area into SOAR as needed.</li> <li>Coordinate with SOC/MSSP on vulnerability triage and detection rules/alerts, coordinate mitigation efforts, and report progress</li> <li>Identify critical flaws in applications and systems that cyber attackers could exploit</li> <li>Conduct vulnerability assessments for networks, applications and operating systems</li> <li>Conduct network security audits and scanning on a predetermined basis</li> <li>Use Crowdstrike, DAST, SAST, Rapid7 to pinpoint vulnerabilities and reduce time-consuming tasks</li> <li>Use refinement techniques to gain understanding to reduce false positives.</li> <li>Compile and track vulnerabilities over time for metrics purposes</li> <li>Serve as advisor to engineering and dev teams in security best practices and design.</li> <li>Work with security and IT teams to identify threats and problem areas and create stronger and safer software and applicatio ... (truncated, view full listing at source)