IT and Security Engineer
Posted Updated
Description
We're building reliable and scalable systems that move money for thousands of businesses. As a regulated payment entity, we take security and compliance as seriously as we take speed. This role owns the controls that keep our endpoints, network, and data safe, and that hold up when auditors come knocking.
The candidate will have responsibilities across the following functions:
Secure and Configure:
- Own EDR rollout deployment, policy tuning, alert triage, and response.
- Configure MDM across macOS, Windows, and mobile devices.
- Roll out DLP across email, SaaS, and endpoints.
- Run patch management and harden the endpoint fleet-wide.
- Maintain firewall rules, VPN, and network segmentation.
Execute and Lead:
- Own ISO 27001:2022 compliance map controls, keep evidence audit-ready.
- Drive vulnerability remediation and access reviews.
- Manage IAM: SSO, MFA, provisioning and deprovisioning.
- Partner with Engineering, Legal, and Compliance on security requirements.
- Handle security incidents: contain, investigate, document, follow up.
Requirements:
- 5+ years in System Administration (Mac/Windows) or IT security.
- Hands-on EDR experience (CrowdStrike, SentinelOne, Defender for Endpoint).
- Hands-on MDM experience (Intune, Jamf, Kandji, Hexnode).
- Direct experience rolling out DLP, not just administering it.
- Scripting for automation (Python, Bash, or PowerShell).
- Working knowledge of ISO 27001:2022 and Annex A controls.
The mindset we're seeking:
- You own problems end-to-end, not just on paper.
- You move fast without cutting corners on security.
- You're as comfortable configuring systems as coordinating people.
- You collaborate well across engineering, legal, and compliance.
