Totara's talent development software empowers people to do their best work. The Totara Talent Experience Platform gives organisations worldwide the power to build unique employee experiences that better develop their people in the way that's just right for them. Our platform brings together our flagship learning management system (LMS) for formal learning, a user-centric learning experience platform (LXP) for learning in the flow of work and a continuous performance management system to keep teams developing their skills in an ever-evolving world of work.
We are seeking a Security Engineer to support our global information, cyber, and technology security. Key areas of ownership - Security practice within R&D - Security practice for operations in NZ - Mobile device management Responsibilities: - Open Source Web Application Security: Govern and support continual improvement of the security posture of Totara's open-source enterprise web application products. - Cloud Security: Help implement and maintain robust security measures for our cloud-based applications, ensuring comprehensive protection.
- Mobile Device Management: Implement and maintain mobile device management solutions, ensuring secure access and usage of company resources. - Security Reporting: Regularly report on the security posture of Totara's products, providing insights and recommendations for enhancements. - Advancing Security Tooling: Develop and advance tooling that supports improved security outcomes for Totara's engineers, enhancing the security integration in the development process.
- Incident Response and Continuity: Lead security incident responses for the web application and cloud environments, ensuring minimal disruption and efficient recovery strategies. - Collaboration and Training: Collaborate with R&D and other teams to promote a security-aware culture that achieves impactful outcomes. Provide training and guidance on the latest security best practices and technologies.
- Documentation and standard reviews: Support an understanding of security posture and position by ensuring reviews, documentation and guides are available and up-to-date. - Discovery, review and penetration testing: Organise, coordinate and participate in security activities that test and reveal the security of Totara's operations, products and services. Knowledge, Skills and Qualifications: - Bachelor's or Master's degree in Computer Science, Information Security, or related field.
- Relevant certifications (e.g., CISSP, CCSP, AWS/GCP/Azure cloud certifications).
- Significant experience in security engineering, particularly with cloud-based web applications and mobile device management. - Proficiency in secure coding practices and familiarity with open-source software security. - Demonstrated experience in developing and implementing security tooling and reporting mechanisms.
- Strong analytical skills and ability to communicate security concepts effectively. - Leadership skills and the ability to w.
...