OPORTUN IS HIRING ASSOCIATE SECURITY ENGINEER

Job Title: Associate Security Engineer
Company: Oportun
Location: Remote – India

About Oportun:
Oportun, listed on Nasdaq as OPRT, is a digital banking platform dedicated to making financial goals achievable for its 1.9 million members. By offering intelligent borrowing, savings, budgeting, and spending solutions, Oportun empowers its members to build better financial futures. Since its inception, Oportun has provided over $15.5 billion in responsible and affordable credit, saving its members more than $2.3 billion in interest and fees, with an average annual savings of over $1,800 per member.

Working at Oportun:
Oportun fosters a diverse, equitable, and inclusive culture where every team member feels a sense of belonging and is encouraged to share their perspectives. This inclusive culture directly contributes to the organization’s performance and its mission of delivering affordable credit to those underserved by traditional financial institutions. Employee resource groups play a vital role in celebrating and nurturing this inclusive culture.

Position Overview:
Oportun is seeking an Associate Security Engineer with expertise in cloud computing to join its Security Engineering & Architecture team. The role involves designing, engineering, deploying, and maintaining custom automation products, ensuring smooth operation of production systems, and implementing security controls for Oportun’s infrastructure and applications. The Associate Security Engineer will collaborate closely with DevOps engineers and developers, automate repetitive tasks, and play a crucial role in enhancing the organization’s security posture.

Responsibilities:

Develop security controls to ensure compliance of cloud applications and infrastructure.
Create intelligent automations to streamline day-to-day operations of Security Teams.
Lead initiatives related to Outbound Email Security and maintain Web Application Firewall.
Provide engineering insights and support during Security Tools Proof of Concept (PoC) activities.
Assist Vulnerability management team with a focus on Application Security Configurations and Coverage.
Build automation tools to manage application and cloud resource inventory.
Identify and address deficiencies in security solutions, fine-tuning them for optimal performance.
Install, configure, and integrate technologies to enhance auditing, prevention, detection, and response capabilities.
Conduct technical research and root cause analysis, implementing resulting actions to strengthen enterprise security.
Design and implement standards, policies, and procedures for automations and integrations.

Requirements:

Bachelor’s degree in computer science, information systems, or related field, or 1+ years of hands-on experience in Engineering and Cyber Security.
Proficiency in scripting, programming, and automation.
Experience with implementing solutions using 3rd party SDKs; awareness of API Security is a plus.
Familiarity with DevSecOps processes and application architecture best practices.
Strong programming skills in Python or Go.
Practical knowledge of Cloud Platform administration (AWS, Azure, Kubernetes).
Basic understanding of CI/CD pipelines and related tools.
Knowledge of Internet security issues, OWASP Top 10, Security Protocols, and Security Compliance and Controls.
Familiarity with Operational processes, Endpoint Security, and Vulnerability management principles.
Ability to build positive relationships with engineering and security teams.
Strong documentation skills.
Passion for Security, Technology, and Automation.
Preferred certifications such as Security+.