Sr. Security Engineer

Funko Overview

Welcome to the Funko-verse, a world built on pure imagination, a land governed by the philosophy that stories matter, a universe comprised of characters from countless fandoms, a galaxy of once upon a times and happily ever afters.

But what does Funko do?

Funko is a purveyor of pop culture and licensed-focused collectibles company. Funko currently holds thousands of lenses and the rights to create tens of thousands of characters – one of the largest portfolios in the pop culture and collectibles industry.  Funko’s Pop! Vinyl is the number one stylized vinyl collectible on the market, selling millions of figures to fans around the world.

We are seeking a highly skilled and experienced Senior Security Engineer to join our dynamic team. In this role, you will be responsible for designing, implementing, and maintaining robust security solutions for our on-premise and cloud-based infrastructure. The ideal candidate will have a deep understanding of information security principles, hands-on experience with various cloud platforms and tools, and a proactive approach to identifying and mitigating security risks.  In this role you will optimize and normalize our existing security toolsets, as well as put forward new methodologies and process to analyze and act on this data.

What You’ll Do

• Cloud Security Architecture: Design, develop, and implement cloud security architecture and solutions to safeguard our environments. This includes defining security requirements, designing security controls, and integrating security best practices.
• Security Assessment & Compliance: Conduct security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks. Ensure compliance with industry standards and regulatory requirements such as SOX, GDPR, HIPAA, PCI-DSS, etc.
• Identity & Access Management (IAM): Implement and manage robust IAM policies and controls to regulate access to cloud resources. This involves managing user identities, roles, permissions, and enforcing least privilege access principles.
• Provide oversight and assist the IT Operations team with the deployment and development of our Identity Management platform. Will assist in developing workflows, automations, and integrations to reduce risk and minimize our attack surface
• Security Automation & Orchestration: Develop scripts, automation tools, and workflows to automate security processes, enhance security incident response, and streamline security operations in cloud environments.
• Threat Detection & Incident Response: Monitor cloud infrastructure for security threats and anomalies. Update and maintain our Incident Response procedures to promptly address security incidents, investigate root causes, and implement corrective actions.
• Security Governance & Risk Management: Establish and maintain security governance frameworks, policies, and procedures. Conduct risk assessments, analyze security posture, and provide recommendations to mitigate risks effectively.
• Security Training & Awareness: Provide security training and awareness programs to educate staff on Cybersecurity Best-practices, emerging threats, and security policies. Foster a culture of security awareness across the organization.
• Collaboration & Communication: Provide direction to DevOps and traditional Development teams to mitigate current and future risk.  Bring awareness to all Technology teams on security best-practices, emerging threats, and security policies.
• Work with our vCISO to participate with Risk Assessment and help advise with Executive/Board-Level reports.
• Perform and Review Security assessments for new SaaS, PaaS, and On-Prem solutions to be deployed
• Assist Data Privacy Office (DPO) with privacy compliance and accompanying regulatory standards.

What You’ll Bring

• Bachelor’s degree in Computer Science, Information Security, or related field. Master’s degree or relevant certifications (e.g., CISSP, CCSP, AWS Certified Security - Specialty) preferred.
• Proven experience (5+ years) in security engineering, specifically, designing and implementing security solutions for cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP).
• Proven Experience operating and managing 3rd-party security assessment tools, MDR/XDR, SIEM solutions, and cloud-native security services.
• Foundational background with on-premise infrastructure:   Active Directory, Windows Server, SQL Server, Windows/Mac/Linux desktops
• Solid understanding of Networking concepts: TCP/IP, Wireless, Storage Networks, SDWAN, VPCs, VPNs
• Strong understanding of cloud security principles, architectures, and services including IAM, network security, encryption, logging, monitoring, and compliance.
• Proficiency in scripting and automation using languages such as Python, PowerShell, or Bash. Experience with cloud security automation tools (e.g., Terraform, AWS CloudFormation, Azure Resource Manager) is a plus.
• Excellent analytical skills with the ability to assess complex security issues, identify root causes, and propose effective solutions.
• Strong communication and interpersonal skills with the ability to collaborate effectively with technical and non-technical stakeholders.
• Proactive mindset with a passion for staying updated on emerging cloud security trends, threats, and best practices.

What Funko Offers

Funko offers a competitive compensation package with full benefits and a 401(K) plan with matching contributions from the company. Most importantly, we offer a creative work environment with people who love pop culture just as much as you do. Can’t wait to gush about your latest binge? Neither can we! Looking for a place where your favorite pop culture t-shirt will receive the compliments it deserves? We know how you feel!

Funko is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.

Work Environment

The noise level in the work environment is usually moderate. While performing the duties of this Job, the employee is regularly required to sit; use hands to finger, handle, or feel and talk or hear. The employee is frequently required to reach with hands and arms. The employee is occasionally required to stand and walk. The employee must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds.

This position is based in Everett, WA (HQ).  

Salary Information   

The base salary range for this position in the selected city is $105,000 – 130,000 annually. ​Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.