Security Engineer - Remote (New Zealand)

About the Company

EverCommerce is a Nasdaq-listed organization focused on transforming the service economy with comprehensive SaaS solutions that enhance the experience for over 725,000 customers. Within the wider EverCommerce ecosystem, the EverWell group (including Timely and SalonBiz) serves more than 30,000 clients in the beauty industry across 100 countries, providing scalable SaaS platforms tailored to business needs.

Role Overview

The Security Engineer will play a vital role in building robust, secure software products and platforms, collaborating closely with Product, Platform Engineering, and central Security teams. The role involves embedding security best practices within the software development lifecycle, identifying and mitigating security risks, and contributing to the overall strengthening of the organization's security posture.

Key Responsibilities

• Collaborate with engineering teams to identify, prioritize, and address security vulnerabilities.
• Enhance security measures across cloud environments and engineering toolsets, such as Azure, AWS, OCI, GitHub, and web application firewalls.
• Support the execution of security initiatives to improve platforms and products.
• Track and report security metrics to drive ongoing improvements.
• Participate in penetration testing, vulnerability management, and security audits, aiding in remediation efforts.
• Maintain the security risk register and assist teams in assessing and managing their risks.
• Automate security integration within CI/CD pipelines, creating developer-friendly tooling.
• Provide training and guidance on secure coding through documentation, code reviews, and knowledge-sharing sessions.
• Engage in threat modeling and security evaluations during product and feature design phases.
• Keep up-to-date on emerging security threats, trends, and best practices.

Qualifications & Skills

• Proven experience in Security Engineering, DevSecOps, Cloud Security, or similar roles.
• Comprehensive understanding of modern cloud and application security concepts.
• Practical experience with cloud platforms such as Azure, AWS, or Oracle Cloud Infrastructure.
• Familiarity with secure software development methodologies, CI/CD pipeline integration, and automation techniques.
• Capability in identifying and mitigating security vulnerabilities.
• Strong analytical thinking coupled with the ability to align security measures with business goals.
• Excellent communication skills and the ability to promote a security-conscious culture.
• Eagerness to learn continuously about evolving security technologies and threats.
• Exposure to security tools like GitHub Advanced Security, vulnerability management systems, WAFs, or similar is an advantage.

Diversity and Inclusion

The company encourages applications from all qualified candidates, including those from underrepresented groups, even if all listed qualifications are not met. They promote an inclusive recruitment process and are willing to accommodate different needs during application and interview stages.

Benefits and Work Culture

• Emphasis on inclusion, diversity, and shared success.
• Strong support for work-life balance with extra annual leave allowances.
• Access to professional development funding to enhance career growth.
• An annual wellness allowance focused on employee health and wellbeing.
• Commitment to an inclusive environment without discrimination based on race, gender identity, sexual orientation, and other protected characteristics.