Cybersecurity Engineer - dscout

About Dscout

At Dscout, we’re building the most flexible and powerful UX research platform on the market—trusted by the world’s top brands in finance (JP Morgan Chase, Intuit, Charles Schwab, PayPal), healthcare (Aya, Headspace), consumer goods (Keen, Verizon, Target, Northface), and tech (Google, Amazon, Facebook, Meta, Spotify, AirBnB). Our tools help teams deeply understand the humans behind their products so they can build better ones.

We are looking for a Cybersecurity Engineer to join the Cybersecurity team, reporting to the VP, Compliance and Information.

The Cybersecurity Engineer will contribute to reducing risk within the Dscout SaaS environment and internal IT systems. This includes planning and implementing cybersecurity controls, supporting cybersecurity operations, and monitoring the threat landscape to ensure Dscout controls operate effectively over time.

What You Will Do

• Lead the process to build security into the Dscout SaaS environment, applying security throughout the software development lifecycle.
• Collaborate with Engineering to plan and implement cybersecurity controls to protect the SaaS environment, including leading practices to secure AWS resources (e.g., VPCs, EC2 instances, and containers).
• Continually enhance security monitoring of the SaaS environment and internal IT services by implementing SIEM and working with Engineering to continuously improve logging and auditability.
• Assess evolving threats and develop recommendations to mitigate risk to Dscout, providing weekly threat intelligence reports.
• Work side-by-side with Engineering to analyze, contain, and mitigate cyber attacks and related incidents.
• Perform vulnerability monitoring and ensure remediation.
• Participate in the development of security policies, processes, and programs to promote security awareness.
• Assist with third-party risk reviews.
• Provide recommendations to continually improve security controls.

What You Will Need

• Experience: A minimum of 3 years of security experience.
• AppSec & DevSecOps: Experience working with developers to conduct security reviews and manage risk, with strong practical knowledge of OWASP Top 10 (web and AI) and security in CI/CD pipelines.
• Cloud Security: Proven experience securing AWS cloud environments and infrastructure as code solutions like Terraform.
• Security Monitoring & Incident Response: Proven ability to implement monitoring tools such as Datadog, identify relevant scenarios, and respond to cyber attacks (bots, account compromises, data leakage, malware).
• Compliance & Frameworks: Knowledge of security frameworks and standards (ISO 27001, NIST, or SANS preferred). Experience with HITRUST and/or SOC 2 certification is preferred.
• Communication: Strong communication, documentation, and presentation skills.

Preferred Qualifications

• Bachelor's degree.
• CISSP, CCSP, or GIAC security certification.

Compensation & Benefits

• Competitive compensation package with a built-in bonus and equity program.
• Progressive benefits package supporting work/life balance, including flexible PTO, 15 company holidays, and 12 weeks of paid parental leave.
• 401(k) match.
• Education stipend to support professional growth and development.
• Remote work stipend.
• Transparent, open company culture.

Note on Location Flexibility: Dscout supports a remote-first workforce across the United States, but is currently unable to hire in Montana, Hawaii, Alaska, and Washington DC.