Are you the new Security Analyst at Pagefreezer?

What We Do And Why

No one can ignore the internet these days—and a lot of great things are happening online—but we also know that online harms are damaging many individuals, communities, and organizations. It’s Pagefreezer's vision to make the Internet a safer place by delivering solutions that transform how people protect integrity online, ensuring accountability, and enabling the pursuit of justice.
Pagefreezer simplifies compliance and litigation by automatically archiving websites, social media, mobile text messages, and enterprise collaboration platforms for every stage of the information governance lifecycle. We enable organizations to create and share defensible records of their data, quickly and easily in our dashboard, in real-time—every like, share, edit, and deletion.

What’s Special About Us

Our coworkers are collaborative, proactive, and interesting -- and they care about the right things. We’ve built a culture based on values that mean something to us and we practice them daily.
Our compensation is comprehensive, competitive, and can include benefits like extended health insurance, a $600 Lifestyle Spending Account, a $1000 annual learning budget, a Tax-Free Savings Account and a matching Retirement Savings Plan and paid time off, if you’re in Canada. Not in Canada? We’ll create a compensation package you’re excited about together.
Our employees’ priorities matter. Career growth? Balancing work and life? Growing your own side-hustle? Helping you live your best life is #goals.
Our track record is strong, our market opportunity is growing, and we’re already providing solutions to some of the biggest companies in the world-- and you'll be helping us accelerate even faster. Come join a sustainably profitable, small company and see the impact of your work.

What Our Security Analyst Does

Collaborate with our Information Security Team to understand Information Security related to our business challenges (a hybrid cloud and on-prem environment) and develop strategies to meet those challenges.

Recommend and leverage tools to enforce and monitor technical security controls.
Create or improve auditable processes to effectively implement security policy.

Own the threat and vulnerability management program and implement processes helping the organization to detect, test, prevent, respond to, and recover from cybersecurity threats or incidents:

Performing continuous internal security and pen testing on our applications, and during the development lifecycle
Recommending and implementing cybersecurity controls and tools to prevent security incidents and minimize risks during software development lifecycle.
Assess risk levels of identified and reported security alerts and vulnerabilities, assigning priority levels and overseeing resolution of vulnerability tickets within timelines.
Performing intellectual property infringement forensic audits, (correct use of open source)

Evaluate the effectiveness of current cybersecurity measures and owning remediation strategies.
Define the technical security requirements for infra and network systems
Own responsibility for successful execution of these requirements by working with infra architects and engineering to implement tools to achieve required results, monitoring implementation
Instructing on remediation actions in case of cyber attacks

Support the complete cycle of internal and external audits for security compliance:

Perform ongoing internal monitoring and assessment of security system configurations and implementation to ensure controls are implemented effectively and that we’re meeting requirements.
Providing evidence as assigned.

Serving as a representative of the Information Security team to internal and external stakeholders, contributing expertise and insight and bringing back information to keep the IS team informed:

Participating in the Architecture Council discussions, planning, and projects.
Contributing to security training materials and cyber security knowledge to improve the secure development lifecycle.
Serve as a member of the Security Council, a cross-functional team in the organization.
Maintain ongoing understanding of best practices and newest trends in the field.
Assist our teams with requests for information, assessments, and questionnaires from our prospects and customers.
Provide input on technical risk assessments of our vendors for cybersecurity,

What Makes You a Great Fit

Alignment with our Core Values
2+ years of experience in Security Operations or Information Security focused on creating technical solutions
Experience working with IT risk management and security scanning tools such as BitSight and SecurityScorecard, MITRE ATT&CK framework, automatic incident response in cloud environments
Experience working with on-premise and cloud provider infrastructure and systems and tools such as Ansible, Zabbix, Jenkins, BURP Suite

Bonus points if you’ve worked with containerization environments, like Docker or Kubernetes.

Deep knowledge working with various information security or regulatory frameworks:

Familiarity with infosec best practices and control technologies, including access control, cryptography, threat modeling, risk assessment, vulnerability management, penetration tests, ID/IPS, etc
Deep knowledge of best practices in security processes including

Bonus if you have these certifications: AWS Security, SOC analyst, CISSP or CISA or CISM or Security+ (Comp TIA)
Able to work 40 hours a week and authorized to work in Canada (anywhere in Canada works for us) or willing to work outside of Canada as a contractor and overlap at least 4 hours with Vancouver timezone

Sound interesting? Time to apply!

Pagefreezer