Director of Web Security

Shutterstock, Inc. (NYSE: SSTK), is a leading global provider of high-quality licensed photographs, vectors, illustrations, videos and music to businesses, marketing agencies and media organizations around the world. Working with its growing community of over 100,000 contributors, Shutterstock adds hundreds of thousands of images each week, and currently has more than 80 million images and nearly 4 million video clips available.

Responsible for the overall security architecture and best practices of our global web presence (cloud-based or on-prem solutions), including determining security requirements; planning, implementing, and testing the systems, as well as preparing security standards, policies, and procedures and ensuring they meet with both Shutterstock and industry-wide security practices.

* Perform manual secure code analysis of source code to uncover security vulnerabilities * Analyze systems security parameters for proper configuration. * Identify security issues and risks, and develop mitigation plans * Architect, design, implement, support, and evaluate security-focused tools and services including project leadership roles * Troubleshooting and resolving security issues in development, test and production environments * Working collaboratively across teams to ensure consistent, performant, and secure approaches for development and production software/infrastructure * Develop security policies and action plans for securing internal tools and data center environment for internal security * Determines system specifications, input/output processes, and working parameters for hardware/software compatibility. * Perform technical security assessments, code audits and design reviews. * Develop automation and technical solutions to help mitigate security vulnerabilities. * Advocate security and secure practices throughout Shutterstock. * Conduct research to identify new attack vectors against Shutterstock’s products and services. * Use the reporting capability of monitoring tools to accurately interpret information provided and communication the results in a manner that is clear and concise.

**Requirements:** * Strong understanding of current security standards for web and mobile applications * Demonstrated ability as an effective mentor and coach who understands how to successfully integrate into and lead a team * Strong analytic, communication and interpersonal skills * Strong problem-solving and analytical skills leveraging all available resources * Strong understanding of HTML, CSS, JS, PHP, XML, HTTPS, REST API, SQL, MySQL * Experience working in Agile SDLC (mainly SCRUM) environments * Experience with virtualized test environments * Ability to work well under pressure, handling multiple tasks and balancing multiple objectives, while consistently ensuring that the highest priority objectives are met. * Enthusiastic attitude and a desire to lead a dynamic and driven team. * Move between Manager, Project Manager, and individual contributor. **Bonus Skills:** * Possess the ability to test and ensure programs you have developed function properly * Security domain knowledge. Application Security specific experience significant benefit. * Familiarity with best practices for web usability and interaction design * Experience with the full development life cycle of web applications from requirements to launch * Experience with various CDN’s (Content Distribution Network) * Experience with various CMS’s (Content Management Systems)