Head of Security

Job content

Description

What we’re looking for

A Head of Security with experience in Javascript and defining and creating security standards. You’ll be the first member of a new squad, with a goal focusing on providing consistent high-quality security best practices to the business and averting threats.

About Us

At Perlego, there are over 80 of us working hard to make education accessible to all. We need your help to get us to an ambitious, yet attainable 110 by the end of the year. In this digital age, we believe that anyone should be able to learn anything at any time. Knowledge should be more accessible, not locked behind sky-high price tags.

Over the past 4 years our goal has been to support students across the UK & Europe to access quality books. The next stage of Perlego is two fold: 1) expand our support to students globally, and 2) build a product that goes beyond the book, a platform that helps students study smarter and more effectively.

How we work together

We organise ourselves into cross-functional squads, with each squad working together on a common data-driven goal. This role will be part of our content squad providing technical leadership for a cross-functional team.

Requirements

Perform Web / Application security reviews and provide actionable recommendations
Perform installation, configuration, monitoring, operational and support for Web / Application security tooling
Architect, Design and Implement Web / Application Security technical controls in line with Information Security classification and Risk outcomes.
Continued development and maintenance of systems, procedures and documentation supporting Web Application security including vulnerability management
Working closely alongside Integration and Development teams providing support on Web Application Security matters
Review ongoing and proposed Technical change projects to identify opportunities for reuse and process improvement within Web / Application realm
Contributing to Security Architecture principles across Web Application domain
Perform Web Application Threat modeling
Supporting Penetration Testing activities
Exposure to cloud computing platforms (preferably AWS) and familiarity with: shared responsibility model, networking security (VPCs, Security Groups, NACLs etc.), logging and monitoring and encryption

It’s the perfect role for you if you have:
Appropriate security certifications (CISSP/GSEC/CISM)

An understanding of ISO27001
A strong understanding of Javascript (Node.js)

At least 4 years of experience in a cybersecurity role.

️ It’s a plus if you have:
A strong understanding of Javascript (Node.js) & Python.

A degree in a computing-related subject

Benefits

✨Compensation

Salary range available £70,000 - £80,000 and discretionary share options

Benefits include:
✨ Flexible

Like many, we’ve adapted our flexible work policy off the back of this year. We offer the option for you to choose to work from home or the office. However, we will likely require you to be available to come into the office at least part-time following Covid-19.

L&D budget

There is an annual training budget for everyone’s personal development

Base holiday

30 days base holiday (22 days + 8 bank holidays)

Christmas break

In addition to your base holiday - the office will be shut for certain days over the Christmas holidays to allow everyone to have a break

Cycle to work scheme

Perlego will buy a bike up-front and you can salary sacrifice to pay-off over the next 12-36 months

Wellbeing subsidy

Subsidy towards your choice of: gym or Vitality health insurance

Subsidised social activities

Encourage everyone in the team to hang out so we have regular team socials and activities