Cvent
Lead Site Reliability Engineer (Security)
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Cvent
Cvent is a technology company that specializes in cloud-based event management solutions. Founded in 1999 in Tysons Corner, Virginia, Cvent has grown into a global provider, serving over 24,000 customers with a workforce of more than 5,000 employees. The company offers a comprehensive suite of services that covers the entire event lifecycle, including online registration, venue selection, event management, mobile apps, email marketing, and attendee engagement tools. Cvent's platform is designed to support various industries, such as agencies, associations, non-profits, financial services, higher education, and life sciences. Its services help organizations efficiently plan and conduct events by automating administrative tasks and enhancing the attendee experience. Cvent's venue sourcing tool assists planners in finding and booking venues, while onsite solutions streamline check-ins and badge printing. The company has a diverse customer base, including corporate clients, educational institutions, and government organizations, and has achieved significant milestones in its growth and market presence.
Security at Cvent
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Cvent's overarching security philosophy is that it is their "highest priority."They address challenges related to "access control, compliance, data privacy, data loss prevention, encryption, and information risk management."Cvent makes "significant investments in security"to "not only meet but often exceed industry standards and applicable regulations."”
Security Team
For "Application and product"security, Cvent "employs certified application security personnel and application security processes to ensure our products are created and designed with security as an integral part of the process."
Key Initiatives
Key initiatives and workflows within application security include a "Vulnerability disclosure program"(bug bounty program), "Secure code training"for software engineers, "Secure design reviews & threat modeling"(adhering to OWASP Top Ten), "Automated security testing"(SAST and DAST), and "Penetration testing"(Red Team exercises).
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.