Security Engineer

Role overview Own and expand the security program for a growing organization, with responsibility spanning corporate security, security operations, and compliance. This is a hands-on role for someone comfortable setting direction, operating independently, and building practical processes and controls as the security function develops. The position is remote within the United States.

Responsibilities - Manage endpoint protection, phishing defenses, threat detection, and incident response across a Mac-centered environment. - Lead the SOC 2 compliance program and coordinate the technical work for the audit cycle. - Maintain identity and access controls, including least-privilege practices across workforce systems. - Improve security visibility by developing useful alerts, dashboards, and monitoring coverage. - Review vendors and integrations for security risk and maintain accurate compliance records. - Create clear security playbooks, documentation, and training that help colleagues follow consistent practices.

Requirements - Four to six years of security engineering experience, ideally in a startup or small organization. - Experience building or substantially developing a security program and making sound decisions amid ambiguity. - Hands-on ownership of Mac fleet security, mobile device management, and related tooling. - Strong corporate security and security operations background, including endpoint defense, detection, phishing response, and incident handling. - Experience owning or making a substantial contribution to a SOC 2 audit. - Familiarity with security monitoring, endpoint protection, identity, collaboration, and compliance tools such as Datadog, SentinelOne, Okta, Google Workspace, or Vanta, or comparable systems. - Clear written and verbal communication, including the ability to explain security decisions to non-specialists.

Nice to have A computer science degree; CISSP, CISM, or OSCP certification; previous DevOps or platform engineering experience; vendor security review experience; or detection engineering at scale.