InfoSec Engineer

Company Overview:

Masterworks is a fintech platform that allows anyone to invest in shares of SEC-qualified blue-chip paintings by names like Banksy, Monet, and Picasso. So far, we have raised over $400M across 100+ paintings from more than 450,000 users. This year, we expect to buy more than $1 billion in art, making us the largest buyer in the art market.

The business has more than 180 employees, and has been featured in major media publications such as The NY Times, CNBC, CNN, WSJ, and more. After becoming profitable in early 2020, just three years after being founded, Masterworks raised $110M in its Series A round with a valuation of over $1 billion.

With the exception of our tech team, all employees work in our offices at Brookfield Place in the Financial District of New York City.

Position Overview:

The InfoSec Team works directly with Engineering, Product, Marketing, Legal and Finance to support the roadmap for Masterwork's products. The objective of the team is to leverage technology to provide investors the ability to learn about and invest in blue-chip artworks. The InfoSec Engineer will partner with the entire organization and work collaboratively as part of the Engineering Team to support a variety of activities to protect the confidentiality, integrity and availability of Masterwork's data and systems. This position reports to the VP of Engineering.

Responsibilities:

• Define and drive the implementation, engineering, and monitoring of secure systems and networks.
• Establish and build a security program such as Security Awareness and Vulnerability Management from the ground up.
• Identify and define appropriate security policies.
• Adapt and stay current on security threats and technology.
• Support networking infrastructure including switches, routers, wireless, and firewalls.
• Collaborate with cross-functional teams such as devops and applications on security issues.
• Monitor and investigate all security incidents. Lead security response efforts.
• Maintain tools to detect and respond to cyber threats. Working experience with Crowdstrike, SentinelOne, or Carbon Black.
• Working in a startup, you will be involved in many different areas. This is a hands-on role. The ability to adapt and pivot in a rapidly changing environment is key.

Requirements:

• Bachelor's degree in computer science, networking, engineering, or other computer-related field
• Minimum 3-5 years of experience in IT with a minimum of 5 or more years of experience in a cyber-security role
• Strong working knowledge and understanding of cyber security tools, frameworks, incident management, operations, and security best practices
• Proven analytical and problem-solving abilities
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Excellent written, oral, and interpersonal communication skills and ability to present ideas in business-friendly and user-friendly language
• Team-oriented and skilled in working within a collaborative environment

Experience with:

• Advanced Endpoint Protection Solutions
• Email filtering and threat protection
• Vulnerability Scanning and remediation
• SIEM, Event Logging and Alerting systems
• Incident Response, Threat Hunting, and Forensics
• Data Protection & File Analysis
• Network, host, application, and data security
• Intrusion detection & protection

Additional Requirements:

• Must be eligible to work in the US.