Staff Application Security Engineer

About the position

Peloton inspires and motivates millions of people every day. A key part of delivering on that mission is not only an outstanding experience that our instructors and platforms provide, but also the data, telemetry, and insights that empower our members to be the best version of themselves anywhere, anytime. Earning and maintaining our members' trust and safeguarding their data is key to everything we do. The Senior Cloud Security Engineer is instrumental in ensuring Peloton's cloud services and systems are implemented and secured with industry-standard processes. The candidate will help define the cloud security program, security policy, and standards and will coordinate with engineering and platform partners to ensure the security bar is upheld. Reporting to the director of digital security, the candidate will work with multiple and diverse teams across Peloton including, but not limited to Product, Platform, and E-commerce Engineering, Legal, Enterprise IT Operations and Security Response. They will coordinate the actions of each and ensure collectively we are working as "one Peloton" to protect our members and the company. The role plays a critical function in constantly evolving Peloton's risk assessment and security review capabilities, ensuring the underlying data related to security defects is used to constantly improve the security of Peloton's products and services. The ideal candidate is a proven engineer who has both exemplary engineering and interpersonal skills. They have extensive experience collaborating with internal engineering partners. They are proven security technology and methodology experts that scale through enabling other engineering partners to make the right security design decisions and trade-offs.

Responsibilities

• Designing, implementing, and maintaining security initiatives to protect the organization's cloud-based infrastructure and data.
• Analyzing incident patterns and identifying gaps in security on the cloud.
• Working closely with development teams and platform teams to drive initiatives to achieve security objectives.
• Collaborating with the Security Automation and Application security teams to identify and implement security tooling to identify vulnerabilities and risks at scale.
• Functioning as a cloud security SME and providing remediation guidance to respective teams for security-related issues.
• Developing and maintaining security standards and best practice documentation to guide engineering partners to build secure systems.
• Working with a high degree of independence, setting security strategies for various initiatives and seeing implementation through.

Requirements

• 7+ years experience with AWS cloud security and strong understanding of AWS services and cloud security controls including but not limited to such as IAM, RDS, EKS, KMS, VPC, Security Groups, AWS Inspector, Guard Duty and SCPs.
• 3+ years experience with understanding DevSecOps pipelines and fixing infrastructure security problems.
• Experience with CSPM and infrastructure vulnerability management.
• Knowledge and hands-on skills with Docker, ECS, Kubernetes, and container security.
• Experience working with DevOps/platform teams to drive engineering remediations to externally identified threats and vulnerabilities.
• Working knowledge of one or more general-purpose programming/script languages, preferably Python.
• Excellent relationship-building skills across diverse cross-functional teams.
• Exceptional written/oral communication skills.
• Exceptional bias for action and ownership.

Benefits

• Medical, dental and vision insurance
• Generous paid time off policy
• Short-term and long-term disability
• Access to mental health services
• 401k, tuition reimbursement and student loan paydown plans
• Employee Stock Purchase Plan
• Fertility and adoption support and up to 18 weeks of paid parental leave
• Child care and family care discounts
• Free access to Peloton Digital App and apparel and product discounts
• Commuter benefits and Citi Bike Discount
• Pet insurance and so much more!