• We’re seeking curious, growth minded thinkers to help shape our vision, structures and systems; playing a key-role as we launch into our ambitious future
• 5+ years of relevant security engineering work experience
• Experience with creating alignments and effective partnership with multiple teams on high impact projects while operating with ambiguity
• Consistently make culture choices that positively impact all of engineering
• Background in security policy authorship and opaque product assessment

Desirable

• Architect, build and proactively secure corporate infrastructure and services at scale, and securely enable business functions
• Implement strong enterprise controls such that security incidents are less likely to happen
• Have controls in place to limit the potential magnitude of an incident
• Validate our controls through technical tools and design reviews to ensure the required security policies/standards are met at scale and on an ongoing basis
• Build secure access controls and policies using modern-era tools and techniques (e.g. WebAuthn, Okta SSO, Okta Identity Governance OIG, PKI, JIT access)
• Oversight on Deploy Data Loss Prevention (DLP) solutions focusing on PII and PCI related data that may be in SaaS applications (e.g. GWork, Jira, Confluence, Salesforce, ServiceNow)
• Perform vulnerability management assessments across SaaS to detect vulnerabilities and security mis-configurations in enterprise applications
• Help craft the overall security strategy for M&As from due diligence through post-close integration
• Implement endpoint state attestation tooling to ensure security configurations (e.g., OSquery, FleetDM, nanoMDM, JAMF, Okta Verify, SentinelOne, Crowdstrike)
• Light scripting or using "no code" workflow tools (e.g., Tines, Okta Workflows, Zapier)
• This role will NOT be required to do the following:
• Heavy software development (coding)
• SIEM threat hunting or SOC / SRE functions