Deepgram is looking for an Information Security Engineer to take ownership of Deepgram’s information security program. This role would include the opportunity to define best practices, policies, and procedures, as well as selecting, configuring, and managing technical controls such as IDS, firewall, and vulnerability management software. This role would also work closely with Deepgram’s CTO/CISO to make top-down decisions around company security posture, advise on how to effectively implement compliance programs, and would respond to customer security questionnaires. About Deepgram Deepgram is the fastest, most accurate, and most scalable enterprise automatic speech recognition (ASR) platform. With our patented end-to-end deep learning approach, we give data scientists the tools to unlock the value of voice by transforming unstructured audio data from phone, meeting and conversational recordings into transcripts with business value. Deepgram takes the heavy lifting out of long form audio transcription, so that call center agents and product organizations can focus on what they do best. Learn more at deepgram.com or sign up for a free account at missioncontrol.deepgram.com/signup.
Responsibilities
- Build, deploy and maintain security controls, instrumentation and detection infrastructure
- Conduct security risk assessments, penetration testing, monitor security vulnerabilities and threats
- Establish appropriate standards, direct implementation, identify and respond to information and security related incidents
- Oversee the creation of the SOC, SIEM and Vulnerability Management technology roadmaps
- Support and coordinate risk assessments and security evaluations for customers deploying either on premise or cloud
Skills Needed
- 5+ years experience in Information Security
- Experience working with the latest information security technologies and tools, including both commercially available and open-source
- Problem solving, analytical and investigative skills combined with the ability to develop creative solutions and navigate through ambiguity in a fast-paced, agile environment
- Understanding of information security specifically around security policy, industry accepted frameworks and security standards such as HIPAA, SOC-2, GDPR, etc