Sr. Security Engineer

We're hiring a hands-on Senior Cybersecurity Engineer to own the security technology that protects Octus employees, endpoints, and enterprise systems. You'll keep our security stack healthy and well tuned, and you'll harden the security settings in the business systems people use every day.

Our security team is small, so this role is broad. Your main focus is IT and enterprise security. You'll also work on cloud security, application security, incident response, vendor risk, and audits. Anyone who joins gets real exposure across the whole program.

You'll also help us secure AI tools. Octus uses AI heavily, and we want someone who can make tools like Claude, Gemini, and ChatGPT safe to use at scale.

Responsibilities

Primary focus: IT and enterprise security

• Own the care and feeding of our security tools. Tune policies, manage upgrades, fix integrations, and retire what we no longer need.
• Manage endpoint security across Mac and Windows with Microsoft Defender, Intune, and Jamf Pro.
• Manage Netskope policies for web, SaaS, and data loss prevention.
• Harden identity in Okta and Microsoft Entra ID. This covers SSO, MFA, conditional access, privileged access, and admin access reviews.
• Set and enforce security configuration in enterprise systems like Google Workspace, Slack, Atlassian, and other SaaS apps.
• Manage email security with Abnormal Security and Google Workspace controls.
• Support secrets and credential management in 1Password.
• Harden AI tools like Claude, Gemini, and ChatGPT. Configure admin settings, connector and MCP controls, audit logging, and data protections.

Also in scope: the broader program

• Build and tune detections in Google SecOps with our managed SOC partner.
• Respond to incidents and lead post-incident reviews. Join the team on-call rotation. Calls are rare.
• Track and drive remediation of cloud and code findings from Wiz and Snyk.
• Partner with Engineering on AWS security and secure development practices.
• Automate security work with Python, APIs, and workflow tools.
• Collect evidence for SOC 2 and support client security reviews.
• Assess security risk in new vendors and tools.
• Mentor teammates and share what you learn across Technology.

Requirements

• 6+ years in cybersecurity or security-focused IT engineering.
• Hands-on experience running EDR and MDM tools across Mac and Windows fleets.
• Strong working knowledge of identity platforms like Okta or Entra ID, including SSO, MFA, and conditional access.
• Experience hardening SaaS platforms such as Google Workspace or Microsoft 365.
• Experience with SSE or secure web gateway tools, and with DLP.
• Experience tuning a SIEM and responding to security incidents.
• Working knowledge of SOC 2, NIST CSF, and GDPR, and how technical controls support them.
• Scripting skills in Python, Bash, or PowerShell. Comfort working with REST APIs.
• Clear writing and speaking with both technical and non-technical people.
• Comfort working across many areas at once on a small team.

Preferred

• Hands-on experience with our stack, including Okta, Microsoft Defender, Intune, Jamf Pro, Netskope, Google SecOps, or Wiz.
• Experience hardening enterprise AI tools such as Claude, Gemini, or ChatGPT, including MCP servers and connectors.
• Experience building security automation or workflows that cut manual work.
• Certifications such as CISSP, GIAC, Security+, or a cloud security cert.