Senior Engineer, Enterprise Cybersecurity

Who We Are

Wayfair is a dynamic, cutting-edge technology company operating in the ecommerce space. We’re committed to providing our customers with a best-in-class experience for all things home. We’re looking for an experienced Senior Engineer for our Enterprise Cybersecurity team. The Enterprise Cybersecurity (ECS) team is responsible for protecting the technologies used by Wayfairians to operate the business, including devices, data and the networks utilized in the warehouses, call centers, and corporate offices. The team is also responsible for managing & supporting a small portfolio of security tools such as Proofpoint, Axonius, and SentinelOne.

This position is a hybrid in-office role that works out of our Toronto HQ. Tuesday-Thursday will be working in office.

What You’ll Do

• Be a subject matter expert for enterprise cybersecurity – design and implement preventative measures to protect Wayfair from outside attackers and insider threats
• Balance usability and flexibility for our users against security for corporate, warehouse, contact center, and physical retail Wayfairians
• Harden endpoints, networks, and applications used by various Wayfair business units
• Improve the security architecture of on premise and cloud infrastructure; harden SaaS and public cloud platforms used by the enterprise including Azure and GCP
• Architect and deploy Google GCP and BeyondCorp security technologies, such as context-aware access (CAA) and identity-aware proxy (IAP)
• Provide technical support and guidance to team members, ensuring the secure, scalable operation of our platform
• Conduct security reviews for the configuration and implementation of technical services

What You’ll Need

• 5+ years of experience in a security or information technology related field
• Experience in hardening endpoints and servers against threats
• Proficiency with infrastructure-as-code (such as Terraform and DSC), including extensive experience with Python
• Strong knowledge of foundational network security concepts such as wireless technologies, layer 7 firewalls, and VLANs 
• Experience providing architecture proposals, which follow security best practices to cross-functional IT teams
• A deep understanding of the Zero Trust security architecture
• Hands-on experience securing cloud platforms such as Azure or GCP
• Experience with authentication and authorization technologies such as SSO Providers, SAML, OAuth2.0, or OPA

About Wayfair Inc.

Wayfair is one of the world’s largest online destinations for the home. Whether you work in our global headquarters in Boston or Berlin, or in our warehouses or offices throughout the world, we’re reinventing the way people shop for their homes. Through our commitment to industry-leading technology and creative problem-solving, we are confident that Wayfair will be home to the most rewarding work of your career. If you’re looking for rapid growth, constant learning, and dynamic challenges, then you’ll find that amazing career opportunities are knocking.

No matter who you are, Wayfair is a place you can call home. We’re a community of innovators, risk-takers, and trailblazers who celebrate our differences, and know that our unique perspectives make us stronger, smarter, and well-positioned for success. We value and rely on the collective voices of our employees, customers, community, and suppliers to help guide us as we build a better Wayfair – and world – for all. Every voice, every perspective matters. That’s why we’re proud to be an equal opportunity employer. We do not discriminate on the basis of race, color, ethnicity, ancestry, religion, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, genetic information, or any other legally protected characteristic.

Your personal data is processed in accordance with our Candidate Privacy Notice (https://www.wayfair.com/careers/privacy). If you have any questions or wish to exercise your rights under applicable privacy and data protection laws, please contact us at [email protected].

Read Full Description