EverCommerce - Security Engineer

Responsibilities - What You’ll Be Doing

• Create and maintain security architecture and engineering processes and procedures
• Design of system architectures which meet established cybersecurity requirements and align with customer needs
• This includes security requirements definition, documentation, and communication.
• Development of security architecture requirements and implementation guidance based on analysis of NIST 800-53 and or other security control frameworks
• Architect, design, implement, maintain, and operates information system security controls and countermeasures.
• Provides techniques and patterns for securing integration with external security system vendors and/or cloud providers
• Leads regular architecture and design reviews to ensure requirements implementation
• Evaluates and plays an active role in life-cycle management of multiple security technologies
• Identify security risks and control gaps within systems, designs, products, data flows, and processes; and recommend corrective architecture, integrations, controls, and operations
• Participate in the development of security requirements, architectures, and documentation to ensure security controls are seamlessly integrated into new technology deployments
• Perform secure architecture and design reviews of new technology and security systems deployments, and collaborate with business teams to integrate secure-by-design principles into CI/CD pipelinbes and Agile development processes
• Maintain a clear view of the overall security architecture roadmap and strategic plan
• Leverage emerging technologies and advanced security practices to ensure EverCommerce is at the forefront of security for our solution groups and our customers
• Build, maintain and mature security architecture metrics and reporting
• Serve as a subject matter expert/contributor measurably improving the overall security framework and program
• Mentor junior security engineers and analysts
• Additional duties as required and assigned