Tumblr is hiring a security engineer that makes things more secure and more seamless inside and out.
What You'll Do:
- Improve the security of our production (datacenter) systems, doing innovative things with ssh, client-side certs, etc.
- Ensure that Tumblr knows as much as possible, as quickly as possible about “interesting” security incidents, including catching novel attacks in early stages.
- Build connections with other startups that attract the same kinds of threats as Tumblr.
- Help Tumblr defend against everything from DDoS to APT to people trying to hijack accounts.
- Verify reports of application-specific security vulnerabilities and assess whether we’re exposed to newly published weaknesses in technologies we use (SSL, PHP, etc.).
- Build security without compromising the ability of Tumblr employees to do their job: identify and deploy solutions that make things safer and easier.
- Wear a white hat at all times.
You’re going to deploy and integrate existing systems, and push the boundaries of good security practices. You have both breadth and depth in the security space, and you care about security being as invisible as possible.