Senior Cyber Security Engineer

Good Systems is the parent company behind Goodnotes, where millions of people capture and develop their ideas. Goodnotes is where we started, and it’s now the foundation for a growing family of products. By reimagining how we interact with information, we’re bringing together human creativity and the breakthrough capabilities of AI. We build products that help people turn good thinking into good work. Our Values Dream big • Be visionary, strategic, and open to innovation Build great things • Work in service of our users, always improving and pushing higher Operate like an owner • Take responsibility with bold decision-making and bias for action Win like a sports team • Be trusting and collaborative while empowering others Learn and grow fast • Never stop learning and iterate fast Share our passion • Share ideas and practice enthusiasm and joy Be user obsessed • Empathetic, inquisitive, practical About the role You will join a distributed team across Europe and Asia with shared time for collaboration such as planning, retros, stand-ups and brainstorming sessions. You will work alongside other iOS engineers, backend engineers, QAs and designers to improve our real-time collaboration features, which are used by millions of users around the globe. As a Senior Security Engineer in Goodnotes, you will own the security of our cloud-based platforms and services on AWS, as well as contributing to the overall security strategy of the organization. This is the role for you, if you’re excited to work on the things listed below: • Design, implement, and maintain security architectures and strategies for AWS cloud environments. • Monitor and analyze security alerts, logs, and reports to detect and respond to potential threats. • Lead incident response activities and perform root cause analysis to prevent future incidents. • Collaborate with cross-functional teams to integrate security into application development and deployment processes. • Work with the legal team to develop and enforce policies for secure cloud operations. • Provide expert guidance on AWS security services and features to internal teams. • Stay up-to-date with emerging security threats, technologies, and trends. • Setup and run bounty programs. The skills you will need to be successful in the above: • 5 years+ experience in a security engineering role with a focus on AWS environment. • Strong knowledge and experience with security standards and frameworks (e.g., SOC2, ISO 27001, etc) • Strong knowledge and able to write IaC for AWS security services and features, such as IAM, Security Groups, VPC, KMS, CloudTrail, and GuardDuty, AWS Control Tower • Ability to lead new projects with a high degree of autonomy and ownership • Experience in real-time collaborative application (i.e. Google Doc) is a plus. • Excellent problem-solving and analytical skills. • Strong communication and collaboration skills. • Actually have hands on experience in reporting CVEs is a big plus • (bonus): security-related certifications (i.e. AWS Security Specialist, GCP Security Specialist, etc..) Even if you don’t meet all the criteria listed above, we would still love to hear from you! Goodnotes places a lot of value on learning and development and will support your growth if needed. Candidates with less experience will be considered for a Security Engineer title. The interview process: • Talent Intro Call: A conversation with our Talent Acquisition team to dive into your experience, what motivates you, and why you're interested in joining Goodnotes. • Take-home challenge: An assignment to complete online on your own time to show your skills. • Role-Specific Assessment: A technical interview with the team, focused on the core skills for this role. A mix of in-de