Staff Information Security Engineer

This advert was translated automatically from Portuguese. Read the original.

Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact centre software, bringing the power of cloud innovation to customers worldwide. Living our values every day results in our team-first culture and enables us to innovate, grow, and thrive while enjoying the journey together. We celebrate diversity and foster an inclusive environment, empowering our employees to be their authentic selves. We are seeking a Staff Information Security Engineer to join Five9's Information Security team. This role will own the operationalisation and ongoing maturity of Five9's Cyber Resiliency programme (the practice of using tooling to continuously identify, prioritise, and remediate infrastructure resilience issues across our AWS, GCP, Azure cloud environments). You'll be responsible for programme governance, tool ownership, process development, and engineering engagement to scale the programme across the organisation. As secondary responsibilities, you will support the Cloud Security programme as a senior technical resource. Key Responsibilities: Cyber Resiliency Programme (Primary) - Own the operational lifecycle of the Cyber Resiliency programme, including tool administration, system and resource mapping, criticality tiering, and issue triage workflows Own the operational lifecycle of the Cyber Resiliency programme, including tool administration, system and resource mapping, criticality tiering, and issue triage workflows - Develop and maintain programme governance: process documentation, SLAs for remediation, escalation paths, and quarterly review cadences Develop and maintain programme governance: process documentation, SLAs for remediation, escalation paths, and quarterly review cadences - Build executive reporting for security and engineering leadership: resilience score trends, remediation velocity, IaC coverage, and risk exposure by system criticality tier Build executive reporting for security and engineering leadership: resilience score trends, remediation velocity, IaC coverage, and risk exposure by system criticality tier - Drive the communication plan for the programme, ensuring engineering teams understand expectations before receiving remediation tickets Drive the communication plan for the programme, ensuring engineering teams understand expectations before receiving remediation tickets - Define and maintain issue prioritisation frameworks that balance system criticality, environment, severity, and remediation effort Define and maintain issue prioritisation frameworks that balance system criticality, environment, severity, and remediation effort - Partner with engineering leads to drive remediation of infrastructure resilience issues, removing blockers and tracking progress through Jira Partner with engineering leads to drive remediation of infrastructure resilience issues, removing blockers and tracking progress through Jira Cloud Security (Supporting) - Partner with the Cloud Security team on architecture reviews, policy development, and strategic initiatives across GCP, AWS, and Azure Partner with the Cloud Security team on architecture reviews, policy development, and strategic initiatives across GCP, AWS, and Azure - Develop and refine security guardrails, policy-as-code, and automated detection and response capabilities for cloud misconfigurations Develop and refine security guardrails, policy-as-code, and automated detection and response capabilities for cloud misconfigurations - Evaluate and improve cloud security posture including IAM architecture, network segmentation, and workload protection Evaluate and improve cloud security posture including IAM architecture, network segmentation, and workload protection - Ensure cloud security solutions are under configuration management and deployed through CI/CD pipelines Ensure cloud security solutions are under configuration management and deployed through CI/CD pipelines Requirements: - 5+ years of experience in information security, with demonstrated experience in a senior technical role 5+ years of experience in information security, with demonstrated experience in a senior technical role - Experience operationalising a security programme or service: building governance, processes, and reporting, not just executing within an existing framework Experience operationalising a security programme or service: building governance, processes, and reporting, not just executing within an existing framework - Deep hands-on experience with at least one major cloud platform (GCP strongly preferred), including IAM, networking, compute, and storage security Deep hands-on experience with at least one major cloud platform (GCP strongly preferred), including IAM, networking, compute, and storage security - Strong experience with infrastructure-as-code (Terraform required) and CI/CD pipelines Strong experience with infrastructure-as-code (Terraform required) and CI/CD pipelines - Demonstrated ability to drive remediation and risk reduction across engineering teams without direct authority Demonstrated ability to drive remediation and risk reduction across engineering teams without direct authority - Experience building executive-level security reporting and metrics Experience building executive-level security reporting and metrics - Excellent communication skills: able to present programme status and risk to engineering leadership, security leadership, and executive audiences Excellent communication skills: able to present programme status and risk to engineering leadership, security leadership, and executive audiences - Self-directed with the ability to manage competing priorities across programme operations and supporting workstreams Self-directed with the ability to manage competing priorities across programme operations and supporting workstreams Preferred Skills: - Experience with cyber resilience or infrastructure resilience tooling (Gambit, Wiz, or similar CSPM/CNAPP platforms) Experience with cyber resilience or infrastructure resilience tooling (Gambit, Wiz, or similar CSPM/CNAPP platforms) - Experience conducting risk assessments or security maturity assessments using frameworks such as NIST CSF, ISO 27001, or CMMI Experience conducting risk assessments or security maturity assessments using frameworks such as NIST CSF, ISO 27001, or CMMI - Background in Kubernetes security and container workload protection Background in Kubernetes security and container workload protection - Experience with multi-cloud environments (GCP + AWS + Azure) Experience with multi-cloud environments (GCP + AWS + Azure) - Python scripting for automation and tooling Python scripting for automation and tooling - Security certifications (CISSP, CCSP, SANS certifications, or similar) Security certifications (CISSP, CCSP, SANS certifications, or similar) - Prior experience in a SaaS, contact centre, or communications platform environment Prior experience in a SaaS, contact centre, or communications platform environment - Experience mentoring or technically leading junior engineers Experience mentoring or technically leading junior engineers Workplace location: This role is fully remote for candidates who reside outside Porto, Maia, Matosinhos, Gondomar, Valongo e Vila Nova de Gaia. Candidates who reside within those municipalities would be required to work in-office 3 days a week. Benefits: - Five9 Shares Five9 Shares - Bonus Scheme Bonus Scheme - 10% Flex Benefit 10% Flex Benefit - Meal Allowance Meal Allowance - Medical Insurance Medical Insurance - Life Insurance Life Insurance - 25 day Annual Leave + Public Holidays 25 day Annual Leave + Public Holidays Five9 embraces diversity and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better we are. Five9 is an equal opportunity employer. Five9 is committed to providing reasonable accommodations for qualified individuals with disabilities throughout the application and interview process. If you need assistance or an accommodation due to a disability, please contact us at accommodations@five9.com to request an accommodation. Requests will be handled confidentially and in accordance with applicable law. View our privacy policy, including our privacy notice to California residents here: https://www.five9.com/pt-pt/legal. Note: Five9 will never request that an applicant send money as a prerequisite for commencing employment with Five9.