IT Security Specialist

Job Summary:

AssetWorks is hiring an IT Security Specialist to handle the daily operation of our endpoint security tools and manage the full employee provisioning lifecycle. This role sits within the Tech Services & Data Security team, reporting to the Manager, Tech Services & Data Security, who retains overall ownership of our security tooling strategy and final decision authority on security matters.

You'll be the person actively working in our security tools every day, running routine operations and handling standard issues on your own, while recognizing when something needs to go to the Manager rather than being handled solo. This isn't a subject matter expert role: we're looking for someone comfortable navigating these platforms day to day and exercising good judgment about what to escalate, not someone who needs to design our security strategy.

We're looking for a high performer for this seat, someone who takes ownership of their day-to-day scope without needing it broken down for them, stays on top of routine tasks consistently, and knows when to bring something to the Manager rather than let it sit.

This is a hands-on, internally facing role covering employees from day one through offboarding.

Job Description:

Endpoint Security Tooling (Daily Operation)

● Work daily in CrowdStrike Falcon, handling routine endpoint detection and response activity and escalating anything beyond standard procedure to the Manager

● Manage Automox day to day for patch deployment and configuration compliance on employee endpoints

● Administer routine Cloudflare Zero Trust access changes for remote and on-site staff

● Review SIEM alerts daily, handle routine findings per established procedure, and escalate anything ambiguous or high-risk to the Manager

● Run recurring vulnerability scans, close out routine remediation items, and escalate significant findings or exceptions to the Manager

Access Documentation & Provisioning

● Maintain a master privilege inventory across all internal systems, documenting exactly what access each employee holds, so access reassignment and offboarding disconnection are fast and complete

● Execute new hire onboarding: hardware provisioning, account creation, system access grants, and credential setup (1Password)

● Execute offboarding: timely access revocation, device return and wipe, and audit trail documentation

● Maintain and improve onboarding/offboarding documentation and checklists in Confluence

● Explore automation or scripted/agent-based tooling to keep the privilege inventory current without manual upkeep

Internal IT Support

● Serve as a point of contact for internal IT support tickets (hardware, account access, basic troubleshooting)

● Coordinate with the broader Tech Services team when internal tooling is involved in an incident

Compliance Support

● Gather and provide evidence and documentation for compliance audit cycles as it relates to endpoint and access controls

● Partner with the Compliance-focused teammate on shared control support; this role handles day-to-day tooling and documentation, while compliance ownership and audit strategy sit elsewhere

Worker Type:

Regular

Number of Openings Available:

1