Security & IT Engineer

📋 Description

• Identity and access: own Google Workspace as our identity provider. Roll out SSO and SCIM
• Endpoints: own device management (MDM, EDR) and endpoint detection and response, including device
• Security operations: tune and triage SIEM detections. Track vulnerability remediation across
• Compliance: run day-to-day work toward SOC 2 and other compliance processes. That includes
• Customer trust: own responses to customer security questionnaires and assessments. Keep our answers
• Vendors: manage day-to-day relationships with our managed IT provider, security vendors and

🎯 Requirements

• 5+ years in IT systems, corporate security, or security engineering, ideally at a startup
• A clear, well-reasoned point of view on how a ~100-person startup should approach security
• Hands-on administration of Google Workspace and an SSO/SCIM stack, plus MDM and EDR tooling
• Working knowledge of AWS IAM. Scripting ability in Python or similar for automation.
• Has been through at least one SOC 2 or ISO 27001 audit from the inside
• Writes clearly and precisely. You prefer a defensible claim to an optimistic one.

🎁 Benefits

• Medical, dental, and vision coverage
• 401(k)
• Flexible PTO
• Learning and development stipend
• Equity