AddressWe believe that everyone can and should automate the tools they use every day.
The Tray Platform empowers anyone to do more, faster by harnessing automation with the leading, low-code general automation platform.
With Tray.io, citizen automators throughout organisations can easily automate complex processes through a powerful, flexible platform, and can connect their entire cloud stack thanks to APIs.
Your Mission
You will serve as the essential link between security, IT, and compliance, ensuring seamless integration and coordination across these vital functions.
Utilising Tray.io automations, you will enhance our security and compliance posture for robust threat detection, secure monitoring, and compliance management.
Your collaboration with various teams will be vital in supporting secure IT operations, managing third-party SaaS applications, and upholding data privacy standards.
About You:
- Proficient in AWS security tools like CloudTrail and GuardDuty for building threat detection and security monitoring.
- Experienced with SIEM tools such as Datadog for managing security events from internal and external SaaS applications.
- Deep understanding of applying and monitoring AAA security principles.
- Skilled in threat modelling and secure design, especially for projects involving Tray.io SaaS applications.
- Experienced with applying data protection and privacy principles in SaaS applications.
- Experienced in managing controls from SOC2, GDPR or security frameworks within corporate environments.
What You Will Do:
Security
This focuses on infrastructure and application security, and working with our engineers.
- Build out threat detection, IDS/IPS (Intrusion Detection/Prevention Systems) and secure monitoring of internal services using AWS services like CloudTrail, CloudWatch, Security Hub and GuardDuty.
- Experience with Datadog or alternative SIEMs to manage events coming from our internal and 3rd party SaaS applications.
- Strong understanding of how the AAA’s (Authentication, Authorisation, Audit) should be applied, communication and monitored with both engineer managed applications and 3rd party SaaS.
Corporate Security & IT
This covers operations and policies that cover ALL employees.
- Threat modelling and secure design reviews for employee-wide internal projects using Tray.io automations, 3rd party SaaS and more recently, AI projects.
- Ensuring the secure usage of our 3rd party SaaS apps w/r/t user management, data use, integrations, GDPR compliance.
- Working with IT to ensure secure usage of mostly MacOS end-user devices (EDR, detection/management/approval of local apps and browser extensions).
Compliance
This focuses on meeting our external commitments, ie: regulations, audits or requests from customers.
- Manage customer related security & compliance requests and, assist Legal and Privacy with contractual commitment discussions.
- Ensuring the timely and accurate completion of customer security questionnaires with assistance from our 3rd party AI completion tool.
- Manage and monitor our SOC2 controls and GDPR compliance, using Tray.io automations to assist.
- Build out our Data Classification Policy and monitor its usage amongst engineers within our internal applications and with all employees using 3rd party SaaS.
Your team will fully support you to do your best work.
Our team is humble but spirited people, who take immense pride in what they do. We work in a culture built on friendship, transparency, and above all, looking out for one another.
The heart of Tray is made of generosity and trust. It is a community built on individual interactions between people who think differently; who are always available to help, to answer questions and to empower. You'll have endless opportunities to learn and grow in a fun, fast-paced, and open environment. We love to achieve things that haven’t been done before.
We believe in diversity and equal opportunity.
We believe that in building diversity we build strength. We encourage all to apply, and we do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status. We will make sure that people with disabilities are provided reasonable accommodation to participate in the job application or interview process.
