Security Engineer

Skills
AdministrationCompliance TestingEvidence CollectionIdentity And Access ManagementMicrosoft 365Microsoft SurfaceMinutes
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • 3–5 years of experience in security operations or identity and access administration
  • Experience with cloud-native enterprise services
  • Solid understanding of IAM concepts including authentication authorization least privilege and RBAC
  • Hands-on experience with privileged access management and endpoint privilege management
  • Experience running or supporting access reviews and removing unneeded access
  • Familiarity with compliance frameworks such as SOC 1 SOC 2 or SOX
  • Comfortable triaging SIEM or endpoint security alerts using documented procedures
  • Experience supporting a security awareness or phishing simulation platform
  • Self-motivated detail-oriented organized and able to manage recurring deadlines
  • Exceptional written and verbal communication with ability to document processes clearly

Nice to have

  • Cloud-native
  • Detail-oriented
  • Self-motivated
  • Organized
  • Communicative
  • Risk-aware

Day to day

  • Run recurring user access reviews and coordinate with system owners to certify access and remove stale entitlements.
  • Gather, validate, and organize evidence for compliance testing and audits using established procedures.
  • Administer privileged access management and security operations tasks including endpoint privilege management, alert triage, phishing simulations, and continuous process improvement.

Hiring process

  • Phone interview with People Operations
  • 30-minute video interview with Hiring Manager
  • Experiential exercise and team member interviews with project deep dive
  • Final 1:1 interview with senior leadership