We are looking for an Information Security Officer to join our Security team, playing a key role in making Bitrise the de facto Mobile DevOps platform.
As an Information Security Officer you will join the Security team, within the R&D organization. Collaboration is an important part of our culture, so you will work together with cross-functional teams along your journey. You will have the chance to tackle various challenges and solve complex problems.We have an office in Budapest and we occasionally organize in-person team events, but this is a remote position for candidates living in Hungary.What you will doYou will be responsible for establishing and maintaining our entire security posture.This includes designing, implementing and maintaining security systems, policies and procedures.You will be responsible for:
- Vulnerability assessments.
- Conducting and facilitating penetration tests.
- Monitoring, responding to, and handling security incidents.
- Assessing and prioritizing vulnerabilities, coordinating remediation efforts in close collaboration with the engineering teams.
- Conducting awareness training and social engineering campaigns.
- Ensuring compliance, adherence to regulations (GDPR, SOC 2, PCI-DSS) and standards.
- Facilitating internal and external security audits, providing necessary documentation.
- Managing external security vendors and tools.
What we expect from you
- Have a strong background in IT security with proven experience in penetration testing, configuration hardening and security best practices.
- In-depth knowledge of security frameworks, risk assessment methodologies, and incident response procedures.
- Strong communication skills, with a proactive, resourceful approach.
- Hands-on certifications like OSCP/OSWP or similar are highly desirable, while certifications like CISSP, CISM are also a plus.
- You are able to understand and explain complex problems in a simple way.
- You are not afraid of giving and receiving feedback in a meaningful and assertive way.
- You are fluent in English, whether it's Slack, e-mail, Google Meet or an in-person conversation.
What would knock our socks off
- We'd be thrilled if you have experience with working in a startup environment or on a SaaS product.
- You prefer automating recurring tasks.
- You have experience leading a team of like-minded security-oriented people.
- Experience with DevSecOps principles and integrating security into CI/CD pipelines would be a huge plus.
- Familiarity with cloud security, particularly Google Cloud Platform, is also highly valued.
- Advanced certifications like BSCP, OSCE or similar are considered as a definite plus.
What we offer
- A transparent and straightforward interview process where you have the chance to meet your future manager, some of your team members, and some of the leaders of Bitrise.
- A massive amount of autonomy and trust while your contributions help shape and grow Bitrise for years to come.
- A remote first environment coupled with a fancy office in Budapest
- The opportunity to learn about app development by playing a crucial role in the mobile development process for the world’s most successful companies.
- The security of working in a financially stable, growing company with an ever-expanding global customer base.
- From your first day, you’ll be covered by private medical insurance.
- A competitive stock options package
- All Bitrisers are provided 2 days of paid Volunteer Days on an annual basis to support the cause that matters to them
