Security Engineer

WHAT WE DO MATTERS:

Here at The Knot Worldwide, we believe in doing work that matters. In 16 countries worldwide, our leading family of brands (The Knot, WeddingWire, Bodas, Hitched, The Bash, The Bump, and more) inspire, inform, and celebrate our communities as they progress through life’s milestones. Our couples and business partners depend on us. They're all in. So are we.

At The Knot Worldwide, we believe you are more than a resume, and invite you to go for it,

ABOUT THE ROLE AND OUR TEAM:

The TKWW InfoSec Team is looking for a Security Engineer to help build and grow security operations to address both deeply technical and programmatic security issues, as well as emerging new threats. You will partner with key project stakeholders to identify key security issues, implement actionable plans to achieve remediation of security threats, and dive deep into tactical security aspects of a service in need of extra attention. 

Successful Security Engineers at TKWW are self-starters, able to work autonomously, natural problem solvers, collaborative, and not fazed by adversity or ambiguity. You should have strong problem-solving skills, excellent communication skills, a deep technical understanding of modern cloud security threats, the ability to influence people from customers to managers through technical solutions, and the desire to be an individual contributor to securing TKWW’s platform and system/services technology.

The TKWW InfoSec Team is responsible for the security and availability of all services offered by TKWW, as well as providing security support for teams leveraging those services. The TKWW InfoSec team collaborates with service teams to design and develop secure solutions, participates in and coordinates cross-organizational security initiatives, and addresses security challenges at scale. This is an exciting and visible role – you will directly influence the security postures for TKWW products and services. 

RESPONSIBILITIES:

• Collaborate with Engineering teams across TKWW to provide scalable vulnerability management and assessment procedures, as well as conduct cloud security reviews.
• Collaborate with Engineering teams across TKWW to build secure and scalable containerized architectures in the cloud.
• Work with various business units to respond to questions, concerns, and or incidents regarding security concerns.
• Work with various business units, helping to integrate security into their functions.
• Implement information security controls and patterns that support risk assessments and the development of secure architectures.
• Collaborate with engineering teams to drive product roadmaps by providing security requirements that map security controls to service features.
• Identify and mitigate risks throughout our corporate and production environments.
• Provide continuous technical support and escalation management for security-related issues throughout TKWW.
• Identify opportunities for process improvement, including the development and implementation of internal security tools, tactics, and procedures.
• Provide security awareness training and outreach to internal development teams.
• Provide security-related guidance and documentation.

SUCCESSFUL SECURITY ANALYST CANDIDATES ARE REQUIRED TO HAVE:

• Bachelor's Degree in Computer Science or a related field 
• Minimum of 3+ years of progressive security architecture experience; preferably within a professional services firm or similar environment working with startups and large mature security companies.
• 2+ years of experience using Akamai WAF and Bot Management platforms
• 2+ years of application security experience designing, building, or testing web and API-based architectures.
• 2+ years of experience working with stakeholders across many functions.
• 2+ years of hands-on experience securing cloud applications and infrastructure (AWS strongly preferred).
• Understanding of security vulnerabilities, attacker exploit techniques, and methods for remediation of such.
• Excellent understanding/working knowledge of the public cloud infrastructure and services in AWS (IAM, VPC, KMS, CloudWatch, Systems Manager, S3, RDS, Route53, Lambda, AWS Config, etc.) is a strong plus.
• Excellent understanding of Docker and container orchestration with Kubernetes and experience running production Kubernetes clusters in Amazon EKS, Google GKE, or similar managed platforms.
• Demonstrated experience in areas such as system security, network, and application security.

NICE TO HAVE:

• Experience with scripting and automation (Python, Go, JS, C, C++, Java, Ruby, or PowerShell)
• Understanding of best practices in one or more security engineering specialties: secure development, cryptography, network security, security operations, systems security, policy, and incident response.
• 2+ years of experience in Security Engineering, DevOps, or IT Operations roles, with a strong familiarity with the principles of DevOps and Agile development.
• 2+ years of hands-on experience operating and securing container-based infrastructures.

WORK MODEL:

This role is fully remote and not tied to any specific office location. While there are no regular in-office requirements, we encourage our remote team members to gather intentionally for key company and team events to stay connected and engaged.

 

Together@TKWW is our approach to hybrid work. It’s designed to support how we work best: combining the flexibility we value with meaningful opportunities to connect in person. Whether a role is Together@TKWW-eligible or not, we believe in purposeful moments to come together, build strong relationships, and drive bold ideas forward.