At WHOOP, we're on a mission to unlock human performance. WHOOP empowers people to perform at a higher level through a deeper understanding of their bodies and daily lives. We handle massive amounts of data continuously streaming up to the cloud collected from the world’s greatest sports teams and athletes mandating a fault-tolerant and highly available product. With such sensitive data we carry an immense responsibility to securely manage our members’ data.
Our Cybersecurity team is located within the Platform organization. Our work is at the intersection of security, privacy, cloud excellence, developer experience and product development. We are responsible for building foundational software services and libraries that enable our backend engineers to develop compliant applications securely. We provide cybersecurity for existing applications as well as enable new business capabilities by getting security and privacy requirements met during the engineering process.
A successful candidate for this position should have experience in software engineering, data privacy, and exposure to cybersecurity systems and practices. Ideally they would also have familiarity with public cloud management.RESPONSIBILITIES:Design, develop, and maintain software applications to ensure compliance with data privacy regulations.Work in a cross functional team that works closely with multiple teams including, Software, Product, InfoSec, GRC, IT and LegalCollaborate with engineers to maintain and continually improve existing privacy toolsManage and improve Transcend system that governs our compliance with data privacy regulationsBe creative and solve problems with solutions that can scaleReview and contribute to application designs and solutions that span code and infrastructureIdentify and define application security requirements and security baselinesMaintain knowledge of current and emerging secure application technologies/products/trendsQUALIFICATIONS:5+ years of proven and extensive Software Engineering experience developing and maintaining scalable, cloud-native software solutions1+ years of experience in data privacy and/or information security - we are open to a diverse set of backgroundsProven and extensive experience in building RESTful APIs and background workers in Java, C#, go or rustProven and extensive experience in secure software development principlesHands-on experience with compliance programsHands-on experience with permission systemsHands-on experience working with DevOps and Agile-driven product teamsYou have excellent written and verbal communication skillsYou thrive in a fast paced and data driven environmentYou are a team player who thrives on continuous learning and direct feedbackWE WOULD LOVE TO SEE:Hands-on experience with systems governing GDPR compliance and customer data rightsHands-on experience in a Bug Bounty program (either triaging bugs or submitting bugs)Hands-on experience with Security observability tools for alarming, diagnostic and forensic use casesHands-on experience with Policy As Code such as Open Policy Agent, AWS Cedar or Hashicorp SentinelHands-on experience with Infrastructure As Code such as AWS CDK and Terraform