Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Security Engineer role.
Rezi rewrites your resume against OneView Commerce's job description. Free.
Tailor your resume to this Senior Security Engineer role.
Rezi rewrites your resume against OneView Commerce's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Security Engineer posting at OneView Commerce — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Security Engineer posting at OneView Commerce — free, in seconds.
About the Role
OneView is seeking a Senior Security Engineer to join the DevSecOps team. This role will own the growth and ongoing management of the InfoSec program, encompassing cloud-hosted applications and infrastructure, security culture, and customer security requirements. The position involves designing security controls, collaborating with engineering teams, and leading incident response, with a focus on defense-in-depth and shifting security checks earlier in the delivery pipeline. AI integration is encouraged, but the ability to perform the role without it is essential.
Responsibilities
- Set requirements for automated threat detection, response, and remediation in cloud-hosted environments, and select tooling with platform engineers.
- Own detection rules and response procedures for security tooling.
- Lead internal threat assessments of environments.
- Assess environments and security programs against industry frameworks like CIS Benchmarks and NIST Cybersecurity Framework.
- Review the external attack surface and public information about OneView.
- Design remediation plans and policies for security vulnerabilities.
- Write security fixes as backlog items with acceptance criteria and evidence of completion.
- Provide risk assessments to the technical product owner for backlog prioritization.
- Set application security testing standards for development teams, including automated tests in pipelines.
- Review security findings with engineers responsible for fixes.
- Implement security controls in Terraform and review infrastructure as code changes affecting security.
- Plan and execute independent security assessments, such as penetration tests and third-party assessments.
- Agree assessment scope with assessors and customers, acting as the point of contact during assessments.
- Track security assessment findings to closure.
- Lead security incident response and serve as the first escalation point.
- Own external security audits end-to-end, defining and compiling evidence, attending sessions, and answering auditor questions.
- Decide on the appropriateness of information provided to auditors.
- Represent security posture to customers through reviews, questionnaires, due diligence, and follow-up discussions.
- Identify and advocate for platform security investments, building business cases and specifying work.
- Explain security issues to engineers, delivery leads, and executives at appropriate levels of detail.
Requirements
- 7+ years in software or cloud security with a hands-on engineering background.
- Working experience with cloud platforms: AWS, Google Cloud, Microsoft Azure.
- Working experience with infrastructure as code: Terraform with Terragrunt, CloudFormation.
- Working experience with CI/CD tools: CircleCI, GitHub Actions, GitLab CI/CD.
- Working experience with security testing tools: Snyk, Semgrep, SonarQube, Checkmarx, Veracode, Trivy, Checkov.
- Working experience with cloud security services: AWS Security Hub, Amazon GuardDuty, Google Security Command Center.
- Working experience with detection and logging tools: Splunk, Elastic, Datadog, Microsoft Sentinel, Google Security Operations.
- Experience building or specifying security gates in CI/CD pipelines.
- Hands-on experience with infrastructure as code guardrails, secrets and key management, and policy as code.
- Experience preparing evidence for external security audits or certifications (e.g., ISO 27001, PCI DSS, Cyber Essentials Plus, SOC 2) and answering auditor questions.
- Experience scoping independent security assessments (e.g., penetration tests) and tracking findings to closure.
- Experience leading the response to a major security incident.
- Experience directly answering customer security teams.
- Ability to explain security concepts to non-specialists.
- Experience identifying an unrequested security investment, building a case, and getting it funded or scheduled.
- Must have current, ongoing right to work in the UK.
- OVC is not a licensed visa sponsor and cannot sponsor a Skilled Worker visa or any other employment visa.
Skills
- AWS
- Google Cloud
- Microsoft Azure
- Terraform
- Terragrunt
- CloudFormation
- CircleCI
- GitHub Actions
- GitLab CI/CD
- Snyk
- Semgrep
- SonarQube
- Checkmarx
- Veracode
- Trivy
- Checkov
- AWS Security Hub
- Amazon GuardDuty
- Google Security Command Center
- Splunk
- Elastic
- Datadog
- Microsoft Sentinel
- Google Security Operations
- Infrastructure as Code Guardrails
- Secrets and Key Management
- Policy as Code
- AI in security
- Vulnerability Disclosure
- Open Source
- Research
Location
- Remote
Work Type
- Remote-first
- Full-time
Experience Level
- Senior
Education Level
- CISSP
- CCSP
- OSCP
- AWS Certified Security Specialty
- Google Professional Cloud Security Engineer
About the Company
- OneView Commerce provides a headless commerce platform for physical retail, enabling large retailers to innovate quickly.
- The platform allows for rapid deployment of store experiences and customization on a headless transaction engine.
- Customers include global retailers who continuously ship new journeys, channels, and store formats.
- Founded in 2010, OneView's mission is to enable retailers to deliver exceptional store experiences by providing a single view of customers, orders, and inventory.
- The company operates as a remote-first team with employees globally.
- OneView is a trusted provider of digital commerce systems for leading retailers.
- The company has been selected by a major retailer to replace their legacy store system.
- OneView has been recognized as one of Built In's Best Places to Work for three consecutive years.
- The leadership team possesses extensive experience in software development, delivery, sales, and marketing.
Equal Opportunity
- OneView Commerce is an equal opportunity employer.
- All qualified applicants will be considered for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.
- The company will provide adjustments to the recruitment process upon request.
- The company does not accept CVs from agencies, headhunters, or other suppliers without a formal agreement.