About the job
About Levelpath:
Levelpath is a cutting-edge AI procurement platform designed for global enterprises. Established in 2022, our mission is to revolutionize procurement by making it a delightful and streamlined experience. With an intuitive interface, Levelpath enhances procurement agility within days and reveals significant savings within weeks, while offering clarity, control, and intelligence for all stakeholders. Our platform provides a comprehensive overview of spending across procurement, finance, legal, and IT, from intake and sourcing to contracting and payment. Powered by AI, we deliver contextually relevant insights and actionable recommendations, unlocking valuable opportunities and drastically improving efficiency. Leading global brands rely on Levelpath's profound procurement expertise to transform their business outcomes and cultivate value from their supplier relationships.
Engineering at Levelpath:
We are seeking an experienced Senior Security Engineer to spearhead and advance our security initiatives. This pivotal role is crucial in enhancing Levelpath's security posture, safeguarding our infrastructure, ensuring compliance, and maintaining customer trust. You will collaborate closely with Engineering, DevOps, and Compliance teams to develop top-tier security programs, from defining policies and responding to incidents to implementing tools and adopting secure development practices.
This position is hybrid/remote with flexible working hours and an office located in Teodors / Jaunā Teika. In this role, you will be part of an international team within an agile environment characterized by short decision-making processes. Our current tech stack includes Slack, Zoom, GitHub, AWS, and you're encouraged to utilize any devices and tools that enable you to perform at your best.
Your Responsibilities:
Lead the design and execution of security and compliance frameworks and internal policies.
Drive incident response efforts and lead investigations into potential breaches.
Manage vulnerability assessment workflows and supervise mitigation planning.
Oversee the implementation and maintenance of security tools such as SIEM, DLP, SAST/DAST, and identity & access management solutions.
Collaborate with Engineering and DevOps to integrate security into CI/CD pipelines and infrastructure.
Guide and engage in customer-facing security reviews, audits (e.g., SOC 2, ISO 27001), and risk assessments.
Conduct security architecture reviews and data flow mapping from a risk and compliance perspective.
