Security & Trust Engineer

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Participate in customer and prospect calls as the security subject matter expert.

• Discuss security topics related to AWS, web, and mobile platforms.

• Manage end-to-end responses to customer security questionnaires, SIG, CAIQ, and RFP security sections.

• Keep pre-approved answers, supporting evidence, and reference architecture diagrams updated.

• Assist in security-related contract reviews and due diligence requests in collaboration with Legal, Sales, and Customer Success.

• Prioritize and address customer security questionnaires, RFP security sections, and due diligence requests within two business days.

• Ensure adherence to customer contractual obligations.

• Act as a daily control owner in Vanta, ensuring evidence is current and addressing any failing checks.

• Contribute to the annual SOC 2 Type 2 audit cycle.

• Aid in expanding the compliance program to cover additional trust service categories.

• Oversee the maintenance of security policies, procedures, and control documentation.

• Manage and document the vendor security review process.

• Engage in organizational risk assessments and vendor evaluations.

• Administer and optimize CrowdStrike Falcon EDR, including alert triage and response.

• Support identity and access security initiatives across Entra ID, including Conditional Access, MFA, and Platform SSO.

• Collaborate with IT on Intune-managed security baselines and compliance policies for Windows and macOS.

• Take charge of vulnerability management, encompassing scanning, prioritization, remediation tracking, and trend reporting.

• Assist with security incident response, investigation, containment, and documentation following incidents.

• Monitor and address issues related to domain impersonation, phishing, and credential exposure.

• Oversee the security awareness training program using tools like KnowBe4.

• Partner with the Director of IT on initiatives and tooling.

• Document processes and runbooks utilizing Notion.

• Track security tasks in Jira and contribute to sprint or project planning.

• Clearly communicate security concepts to both technical and non-technical stakeholders.

⛳️ Requirements

• Minimum of 3 years of experience in security engineering, security analysis, GRC, or IT security roles.

• Direct experience in responding to customer security questionnaires and assisting with customer security calls.

• Practical experience with SOC 2.

• Familiarity with Vanta or comparable GRC/trust platforms such as Drata or Secureframe.

• Working knowledge of endpoint protection/EDR tools like CrowdStrike.

• Understanding of identity and access management concepts including SSO, MFA, and Conditional Access within a Microsoft/Entra ID environment.

• Ability to work independently in a remote, fast-paced environment while managing multiple priorities.

• Excellent written and verbal communication skills; capable of articulating security topics to both technical and non-technical audiences.

• Preferred: experience with Microsoft 365, Intune, and MDM security baselines.

• Preferred: experience with vulnerability management tools and vendor risk management processes.

• Preferred: relevant certifications such as Security+, CySA, CISSP, or a compliance certification from Vanta/Drata.

• Preferred: experience with EU compliance programs such as GDPR and ISO 27001.

• Preferred: experience supporting a SaaS or industrial IoT company through customer-facing security review processes.

• Preferred: familiarity with Jira, Slack, and Notion within a security operations context.

🏝️ Benefits

• Competitive compensation package including stock options.

• Flexible work schedule.

• Comprehensive benefits package including a retirement plan match.

• Unlimited PTO.

• Remote work opportunities across locations in the United States and Ontario, Canada.

• Collaboration within core working hours.

• Opportunity to make a meaningful impact every day.

• Work alongside a dynamic and expanding team.