Fsh Engineer - Security at FSH Tech to build and maintain software with a focus on security and compliance. Adapt traditional security techniques to unique software solutions.
Responsibilities
FSH builds software for governments, schools, and other NGOs. These institutions are deeply trusted with sensitive data by us all. We view this as a responsibility and an opportunity. Our architecture enables solving problems with deep attention to detail and customization for our clients — and we are looking for security and compliance minded engineers to construct and maintain FSH’s software and compliance posture with an eye for innovation.
Because of our approach, many traditional techniques (from pen testing to software auditing) need to be carefully adapted to suit our solutions. Relationships with auditors and security vendors need to be similarly reworked. We need to create a framework that fairly validates our posture, and then automate its continued use across many pieces of similar but unique software.
Build and maintain software for customers
Seek and ingest feedback
Define engineering culture
Qualification
Experience as a security engineer (eYou are a perennial tinkererYou are obsessed with focused learningYou love pattern seekingExperience shipping software to users
Required
Experience as a security engineer (e.g. handled SOC II or similar compliance processes, managed bug bounty programs, etc)
[optional] Experience working with internal compliance officers or external auditors
[optional] Experience shipping software to users
You’re the right person for the job if many of these are true:
You believe programming is a creative pursuit
You are a perennial tinkerer
You gain energy from being close to the customer, always
You are obsessed with focused learning
You believe abstractions can simplify complexity
You love pattern seeking
Modern inventory management is best handled through Venetian double entry accounting
Buddhist meditation and dialectical behavior therapy are closely related
Preferred
Experience as a security engineer (e.g. SOC II, bug bounty programs)
Experience working with internal compliance officers or external auditors