ABOUT THE ROLE
Peloton inspires and motivates millions of people every day. A key part of delivering on that mission is not only an outstanding experience that our instructors and platforms provide, but also the data, telemetry, and insights that empower our members to be the best version of themselves anywhere, anytime. Earning and maintaining our members’ trust and safeguarding their data is key to everything we do.
The Senior Cloud Security Engineer is instrumental in ensuring Peloton’s cloud services and systems are implemented and secured with industry-standard processes. The candidate will help define the cloud security program, security policy, and standards and will coordinate with engineering and platform partners to ensure the security bar is upheld.
Want more jobs like this?
Get jobs in New York, NY delivered to your inbox every week.
Reporting to the director of digital security, the candidate will work with multiple and diverse teams across Peloton including, but not limited to Product, Platform, and E-commerce
Engineering, Legal, Enterprise IT Operations and Security Response. They will coordinate the actions of each and ensure collectively we are working as “one Peloton” to protect our members and the company.
The role plays a critical function in constantly evolving Peloton’s risk assessment and security review capabilities, ensuring the underlying data related to security defects is used to constantly improve the security of Peloton's products and services. The ideal candidate is a proven engineer who has both exemplary engineering and interpersonal skills. They have extensive experience collaborating with internal engineering partners. They are proven security technology and methodology experts that scale through enabling other engineering partners to make the right security design decisions and trade-offs.
YOUR DAILY IMPACT AT PELOTON
- Designing, implementing, and maintaining security initiatives to protect the organization's cloud-based infrastructure and data.
- Be able to analyze incident patterns and identify gaps in security on the cloud.
- Work closely with development teams and platform teams to drive initiatives to achieve security objectives.
- Collaborate with the Security Automation and Application security teams to identify and implement security tooling to identify vulnerabilities and risks at scale.
- Function as a cloud security SME and provide remediation guidance to respective teams for security-related issues.
- Develop and maintain security standards and best practice documentation to guide engineering partners to build secure systems.
- Be able to work with a high degree of independence, setting security strategies for various initiatives and seeing implementation through.
YOU BRING TO PELOTON
- 7+ years experience with AWS cloud security and strong understanding of AWS
services and cloud security controls including but not limited to such as IAM, RDS, EKS,
KMS, VPC, Security Groups, AWS Inspector, Guard Duty and SCPs. - 3+ years experience with understanding DevSecOps pipelines and fixing
infrastructure security problems. - Experience with CSPM and infrastructure vulnerability management
- Knowledge and hands-on skills with Docker, ECS, Kubernetes, and container security.
- Experience working with DevOps/platform teams to drive engineering remediations to
externally identified threats and vulnerabilities. - Working knowledge of one or more general-purpose programming/script languages,
preferably Python - Excellent relationship-building skills across diverse cross-functional teams.
- Exceptional written/oral communication skills.
- Exceptional bias for action and ownership.
#LI-AC1
#LI-Hybrid
As an organization, one of our top priorities is to maintain the health and wellbeing for our employees and their family. To achieve this goal, we offer robust and comprehensive benefits including:
ABOUT PELOTON:
Peloton (NASDAQ: PTON) provides Members with expert instruction, and world class content to create impactful and entertaining workout experiences for anyone, anywhere and at any stage in their fitness journey. At home, outdoors, traveling, or at the gym, Peloton brings together innovative hardware, distinctive software, and exclusive content. Founded in 2012 and headquartered in New York City, Peloton has millions of Members across the US, UK, Canada, Germany, Australia, and Austria. For more information, visit www.onepeloton.com.
Peloton is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. Equal employment opportunity has been, and will continue to be, a fundamental principle at Peloton, where all team members, applicants, and other covered persons are considered on the basis of their personal capabilities and qualifications without discrimination because of race, color, religion, sex, age, national origin, disability, pregnancy, genetic information, military or veteran status, sexual orientation, gender identity or expression, marital and civil partnership/union status, alienage or citizenship status, creed, genetic predisposition or carrier status, unemployment status, familial status, domestic violence, sexual violence or stalking victim status, caregiver status, or any other protected characteristic as established by applicable law. This policy of equal employment opportunity applies to all practices and procedures relating to recruitment and hiring, compensation, benefits, termination, and all other terms and conditions of employment. If you would like to request any accommodations from application through to interview, please email: applicantaccommodations@onepeloton.com.
Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance and the San Francisco Fair Chance Ordinance, as applicable to applicants applying for positions in these jurisdictions.
Please be aware that fictitious job openings, consulting engagements, solicitations, or employment offers may be circulated on the Internet in an attempt to obtain privileged information, or to induce you to pay a fee for services related to recruitment or training. Peloton does NOT charge any application, processing, or training fee at any stage of the recruitment or hiring process. All genuine job openings will be posted here on our careers page and all communications from the Peloton recruiting team and/or hiring managers will be from an @onepeloton.com email address.
If you have any doubts about the authenticity of an email, letter or telephone communication purportedly from, for, or on behalf of Peloton, please email applicantaccommodations@onepeloton.com before taking any further action in relation to the correspondence.
Peloton does not accept unsolicited agency resumes. Agencies should not forward resumes to our jobs alias, Peloton employees or any other organization location. Peloton is not responsible for any agency fees related to unsolicited resumes.