Information Security Analyst

Curalate is a leading marketing technology company that enables brands to sell online more effectively. The Curalate Discovery-Driven Commerce Platform is currently in use by over 800 of the world’s most loved brands including Urban Outfitters, Neiman Marcus, Sephora and J.Crew, and touches hundreds of millions of consumers, monthly. With Curalate, brands grow engagement and revenue, at scale, utilizing images and videos from a wide variety of sources, including User Generated Content (UGC).

Curalate is looking for an agile, experienced Information Security Analyst to help us keep our industry-leading software and services secure and reliable. As our first in-house security expert, we’ll look to you to codify our security protocols, adopt best practices and processes, and establish a best-in-class security posture. You’ll also perform risk analysis, identify potential vulnerabilities, and work with our engineering team to put in place the appropriate defenses.If you’re equally excited about analyzing large-scale systems -and- instilling a company-wide security culture, then we’re looking for you!

* Work with our engineering and people teams to establish, document, and periodically test our company-wide security policies and protocols * Lead new-hire security training and periodic refresher classes * Perform (or work with partners to perform) vulnerability assessments of all Curalate internal & external services * Keep tabs on new and emerging security products and technologies to keep our systems cutting-edge * Work with our DevOps team to maintain and test our DR/BCR plans * Work with our Sales Engineering team to complete external security reviews and audits * Help us to prevent, monitor, and respond to threats and other security incidents

**About You:** * You have 3+ years in an InfoSec analysis or engineering role * You like breaking & entering (the testing kind, not the felony kind) into networks and computer security systems * You have the communication skills to confidently talk about our security measures to clients, prospects, and 3rd parties * You’re comfortable reasoning about large-scale distributed systems and web-based services (a giant architecture diagram doesn’t scare you) * You have real-world experience with AWS **Gold Stars:** * You’ve played an integral role in the security org at a high-growth startup