Security Software Engineer Cambridge, MA The first of few on our newly forming Security Engineering team will own the ideas, implementation, and eventual policy creation for our mission critical platform. We want to use tools and brains vs. process and policy to ensure our systems are secure, we continue to respect the privacy of our customers, and the free social world at large that interacts with our various free and paid products. You will have to be very hands on but intellectually curious on policy and procedures as we look ahead into a vastly growing customer base. This position is an engineer at heart. Requirements: **Code, Hack, Script in Python, Java, or a similar language. We will continue to automate much of the controls ** Command a deep knowledge of network and server security and the physical implementation from firewalls (hardware and software, Intrusion Detection Systems, Log monitoring systems) ** Understand cryptography, PKI, ciphers, etc **Dig very deep into logs (big big logs) of all kinds - access logs, application logs, event logs, sys logs, etc. **Demonstrate a strong understanding of web application security including cookies, tokens, hashs, and other methods to securely transmit and store data. Working knowledge of OWASP and both testing and defence mechanisms **Ability to create and execute ethical hacking and testing of securing using internal and 3rd party tools we will build or provide. ** Experience or deep understanding of virtualized platforms, infrastructure as a service providers (yes, cloud), and SaaS platforms (we are all SaaS, all the time). **Exposure to server automation tools such as Puppet or Chef, software based security controls vs. hardware, and general aptitude for solving problems with systems vs. poeple is on the path to truth and justice. Educational and Experience Requirements: **BS or equivalent in an information technology related field (BSCS, BSEE, BSMIS) or 4 years hands-on experience in this specific field **2 years practical experience in either engineering or IT working in the areas of security **Experience in large scale web-hosting, SaaS, or Cloud is a must