Senior Cyber Security Engineer

📋 Job Overview

Good Systems is the parent company behind Goodnotes, where millions of people capture and develop their ideas. Goodnotes is where we started, and it’s now the foundation for a growing family of products. By reimagining how we interact with information, we’re bringing together human creativity and the breakthrough capabilities of AI. We build products that help people turn good thinking into good work.

🏢 About Good Systems

Good Systems is the parent company behind Goodnotes, where millions of people capture and develop their ideas. Goodnotes is where we started, and it’s now the foundation for a growing family of products. By reimagining how we interact with information, we’re bringing together human creativity and the breakthrough capabilities of AI. We build products that help people turn good thinking into good work.

🎯 The Role

You will join a distributed team across Europe and Asia with shared time for collaboration such as planning, retros, stand-ups and brainstorming sessions. You will work alongside other iOS engineers, backend engineers, QAs and designers to improve our real-time collaboration features, which are used by millions of users around the globe. As a Senior Security Engineer in Goodnotes, you will own the security of our cloud-based platforms and services on AWS, as well as contributing to the overall security strategy of the organization.

✅ Key Responsibilities

• Design, implement, and maintain security architectures and strategies for AWS cloud environments.
• Monitor and analyze security alerts, logs, and reports to detect and respond to potential threats.
• Lead incident response activities and perform root cause analysis to prevent future incidents.
• Collaborate with cross-functional teams to integrate security into application development and deployment processes.
• Work with the legal team to develop and enforce policies for secure cloud operations.
• Provide expert guidance on AWS security services and features to internal teams.
• Stay up-to-date with emerging security threats, technologies, and trends.
• Setup and run bounty programs.

📌 Required Qualifications

• 5 years+ experience in a security engineering role with a focus on AWS environment.
• Strong knowledge and experience with security standards and frameworks (e.g., SOC2, ISO 27001, etc)
• Strong knowledge and able to write IaC for AWS security services and features, such as IAM, Security Groups, VPC, KMS, CloudTrail, and GuardDuty, AWS Control Tower
• Ability to lead new projects with a high degree of autonomy and ownership
• Experience in real-time collaborative application (i.e. Google Doc) is a plus.
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.
• Actually have hands on experience in reporting CVEs is a big plus
• (bonus): security-related certifications (i.e. AWS Security Specialist, GCP Security Specialist, etc..)

🎁 Benefits

• Customized Growth & Wellness Budgets: We provide dedicated stipends for the things that keep you at your best, including noise-cancelling headphones for deep focus, professional training, personal development, and health and wellness activities.
• Global Connectivity: While we embrace flexible work, we love seeing each other. We provide sponsored visits to our beautiful office locations to foster face-to-face collaboration.
• Company-Wide Offsites: Once a year, we gather the entire global team in person to celebrate our wins, align on our vision, and build lasting connections.
• Comprehensive Health Coverage: Your well-being is our priority. We offer premium medical insurance for you and a dependent to ensure peace of mind for you and your family.
• 4 days in-office hybrid week and 18 remote working days per year: Giving you the freedom to work from a location that suits your life. Whether that's closer to family, while travelling, or simply a change of scenery to refresh your focus.

🛂 Visa & Eligibility

Goodnotes is committed to fostering a diverse, inclusive, and equitable workplace. We welcome applications from individuals of all backgrounds, identities, and experiences, making all employment decisions based strictly on merit, qualifications, and business needs.