IT Security Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Safeguard Axios systems, devices, identities, applications, and workflows.

• Manage security for Axios’ Mac devices, encompassing Jamf, compliance, monitoring, alert investigation, malware response, and device remediation.

• Oversee Okta-based identity and access management, which includes adaptive MFA, authentication, SSO, application assignments, access scopes, and joiner/mover/leaver processes.

• Collaborate with People, Legal, and Infrastructure teams on provisioning, offboarding, access removal, archival, legal holds, and lifecycle automation.

• Establish and uphold security configurations and risk controls for core services and SaaS applications.

• Assess browser and SaaS security boundaries while identifying risks in browser-based workflows.

• Utilize logs and activity monitoring to investigate suspicious behavior and support incident response efforts.

• Evaluate systems, tools, permissions, and workflows for their security, operational fit, and supportability.

• Safeguard high-risk users, including journalists and executives, through privacy, account security, and personal data protections.

• Develop and manage security awareness programs, phishing simulations, reporting workflows, completion tracking, and targeted training initiatives.

• Create and deliver tailored security training for newsroom, journalism, business, and technical teams.

• Formulate AI security policies and guidelines.

• Review AI tools, automations, agents, and internally developed solutions for data handling, permissions, authentication, authorization, secrets management, logging, monitoring, human oversight, and operational readiness.

⛳️ Requirements

• Extensive experience in IT security, endpoint security, identity and access management, systems administration, or a related discipline.

• Practical experience with macOS, Jamf or similar endpoint platforms, CrowdStrike Falcon, Okta or an equivalent identity provider, and Google Workspace security.

• Knowledge of modern security boundaries across browsers, SaaS applications, identity providers, endpoints, APIs, data flows, and AI-enabled systems.

• Experience in security logging, monitoring, incident investigation, vendor assessments, and SaaS risk management.

• Proven track record in operating or enhancing security awareness, phishing, or role-specific training programs.

• Ability to assess risk within the context of real-world workflows, user needs, business requirements, and operational constraints.

• Ongoing development of AI literacy and responsible utilization of AI tools.

🏝️ Benefits

• 401(k) with employer matching.

• Comprehensive PPO and High Deductible health insurance options available on the Blue Cross Blue Shield network.

• Employer contributions to Health Savings Account (HSA) for the high deductible health plan option.

• Dental and vision insurance coverage.

• 12-week paid leave for primary caregivers.

• Birth-givers will receive an additional 6-8 weeks based on the type of delivery, totaling 18-20 weeks of continuous leave.

• Generous vacation policy along with holidays.

• One mental health day per quarter.

• Annual learning and development stipend.

• $100 monthly work-from-home stipend.

• Access to tele-mental health services via Headspace.

• OneMedical membership, including tele-health services.

• Personal health advocacy resources through HealthAdvocate.

• Inclusive fertility, hormonal health, and family forming benefits through Carrot Fertility.

• Access to the Axios “Family Fund,” designed to provide financial support during hardships or emergencies.

• Enhanced work flexibility for parents and caregivers.

• Virtual company-sponsored social events.

• A strong and positive work environment.

• Commitment to fostering an open, inclusive, and diverse workplace culture.

• Continuous learning opportunities to promote responsible and effective AI tool usage.