Summary
What you’ll impact
Our company is hiring its first dedicated Corporate IT and Security Engineer to own and operate employee devices, identity, SaaS applications, corporate network security, and SOC 2 security operations. The role involves hands‑on implementation, automation, incident response, and collaboration with engineering, people, and operations to establish security standards as the organization scales.
Responsibilities
What you'll do
- Own employee IT across laptops, mobile devices, identity, access, onboarding, and offboarding
- Configure and manage MDM, SSO, endpoint security, email security, and company-wide SaaS applications
- Own corporate network security, including office networks, Wi-Fi, firewalls, DNS, VPNs, segmentation, and zero-trust access
- Maintain an accurate inventory of devices, applications, accounts, licenses, and access
- Build reliable onboarding and offboarding workflows with appropriate access controls
- Run day-to‑to‑day security operations, including monitoring, vulnerability management, incident response, and remediation
- Manage vulnerability scanning and coordinate remediation across corporate systems, endpoints, networks, and applications
- Own continuous control monitoring, evidence collection, audit preparation, and coordination with external auditors
- Conduct regular access reviews and maintain clear security policies, procedures, and runbooks
- Lead vendor security reviews and help evaluate new software, integrations, and AI tools
- Respond to customer security questionnaires and maintain reusable security and compliance materials
- Partner with Engineering on threat modeling, penetration tests, application‑security standards, product security, cloud infrastructure, and customer deployment reviews
- Track security findings through remediation and verify that critical issues are resolved
- Build automations that make IT, security, and compliance processes faster and more reliable
- Help employees adopt AI tools and workflows with appropriate access, privacy, and data controls
- Serve as the first point of contact for employee IT and security questions
Requirements
What you’ll bring
- 5+ years of experience across corporate IT, systems administration, information security, security operations, or related roles
- Hands‑on experience managing identity providers, SSO, MFA, MDM, endpoints, and enterprise SaaS applications
- Experience operating in a primarily macOS environment
- Experience with employee provisioning, access reviews, asset management, and onboarding and offboarding
- Experience supporting a SOC 2 program, including control operation, evidence collection, and audit coordination
- Working knowledge of network security, including segmentation, firewalls, VPNs, DNS, and secure access
- Familiarity with application‑security practices such as threat modeling, secure development, dependency scanning, vulnerability management, and penetration testing
- Ability to work with engineers on technical security risks without needing to own product development
- Working knowledge of endpoint security, incident response, vulnerability management, and vendor risk
- Ability to automate workflows with scripting, APIs, or modern automation tools
- Good judgment when balancing security, usability, and speed
- Clear written communication and reliable operational follow‑through
- Comfort owning a broad function and solving problems directly in a fast‑moving company