About Vend
Vend is an integrated software, payments, and operations company revolutionizing how real estate owners, tenants, and visitors interact with parking. By combining the latest technology with a modern business model, we deliver transparency, efficiency, and smarter operations that enhance the parking experience while driving significant value for real estate owners. Our platform increases net operating income by optimizing asset performance, reducing costs, and providing a seamless, data-driven solution that meets the demands of today’s built world.

Position Overview
Vend is looking for a Senior Engineer focused on Security to ensure platform and IoT devices are secure, leveraging expertise in Firebase security rules, networking security, and GCP. You will play a key role in ensuring compliance with SOC2, CCPA, and GDPR.

Responsibilities

• Security Implementation: Design and implement security solutions across our platform, ensuring robust protection for both cloud services and IoT devices.

• Firebase Security Rules: Leverage your expertise in Firebase security rules to protect sensitive data and secure backend services.

• IoT Networking Security: Work closely with our IoT devices to ensure secure networking and data transfer, addressing vulnerabilities and implementing best practices for device and network protection.

• Compliance and Certifications: Ensure that our security practices align with industry standards such as SOC2, CCPA, GDPR, and other relevant frameworks. Assist in audits and certifications to maintain compliance.

• Collaborate with Development Teams: Ensure that security is considered during the entire development lifecycle, working closely with engineers to implement secure practices in Node.js, React, and TypeScript.

• GCP Security: Leverage Google Cloud Platform services, particularly Firebase, to ensure that all security configurations are optimized and follow industry best practices.

Requirements and Qualifications

• 6+ years of experience in security engineering, with a focus on cloud-based applications and IoT device security.

• Strong experience in implementing security alongside new features.

• Expertise in Firebase security rules and working with Firebase on the Google Cloud Platform.

• IoT networking security experience, particularly in securing communications and data across connected devices.

• Proficiency in Node.js, React, and TypeScript to ensure secure development practices.

• Knowledge and practical experience with SOC2, CCPA, GDPR, and other compliance standards.

• Ability to lead security initiatives and work effectively with cross-functional teams to build secure products.
  

Benefits and Perks

• Join an early-stage company with the opportunity to see the direct result of your work.

• Health, wellness, and retirement benefits.

• Employee stock options, competitive pay.

• Hybrid work environment.