Information Security Engineer

Get to Know Us:

It's fun to work in a company where people truly believe in what they're doing!

At BlackLine, we're committed to bringing passion and customer focus to the business of enterprise applications.

Since being founded in 2001, BlackLine has become a leading provider of cloud software that automates and controls the entire financial close process. Our vision is to modernize the finance and accounting function to enable greater operational effectiveness and agility, and we are committed to delivering innovative solutions and services to empower accounting and finance leaders around the world to achieve Modern Finance.

Being a best-in-class SaaS Company, we understand that bringing in new ideas and innovative technology is mission critical. At BlackLine we are always working with new, cutting edge technology that encourages our teams to learn something new and expand their creativity and technical skillset that will accelerate their careers.

• Develop and maintain BlackLine's risk framework.
• Define effective information security standards, processes, and procedures.
• Perform security assessments and penetration tests.
• Administer security tools and technologies.
• Evaluate, recommend, and deploy security tools and technologies.
• Collect and analyze systems/application security logs.
• Monitor industry trends and threat landscape and recommend necessary controls or countermeasures.
• Ensure compliance with internal policies/standards and regulatory requirements.
• Respond to security incidents; perform forensics activities and root cause analyses.
• Perform other duties as assigned.

• 3+ years of hands-on information security experience.
• Expertise in Windows and IIS. Working knowledge of Linux/Unix (advanced Linux skills are a big plus).
• Working knowledge of network security -- thorough understanding of the OSI model and comprehensive knowledge of common protocols and services for levels 3 through 7.
• Proven track record of effectively supporting commonly-used information security tools and processes (e.g.: patch management, log management, malware management, web filtering, firewalls, proxies, APT, IDS, DLP, HIDS/NIDS, network access control, threat and vulnerability management)
• Experience supporting high-volume, high-availability web-facing environments.
• Wireless security and mobile devices management.
• Knowledge of encryption algorithms and related technologies, secure communications, SSL, PKI.
• Functional skills in at least one scripting language (e.g.: Perl, Python). Working knowledge of WMI and WSH.
• Solid knowledge of common vulnerabilities and exploitation techniques (e.g.: SQL injection, buffer overflows).
• Ability to define effective information security standards applicable to specific environments.
• Advanced written and verbal communication skills including ability to present technical subjects to non-technical audiences.
• Strong work ethics, attention to detail, and organizational skills.
• Ability to multi-task and manage priorities in a fast-paced environment.
• Ability to collaborate in a team and work independently.
• Intermediate proficiency with the Microsoft Office suite.

• A technology-based company with a sense of adventure and a vision for the future. Every door at BlackLine is open. Just bring your brains, your problem-solving skills, and be part of a winning team at the world's most trusted name in Finance Automation!
• A culture that is kind, open, and accepting. It's a place where people can embrace what makes them unique, and the mix of cultural backgrounds and varying interests cultivates diverse thought and perspectives.
• A culture where BlackLiner's continued growth and learning is empowered. BlackLine offers a wide variety of professional development seminars and inclusive affinity groups to celebrate and support our diversity.