Security & Trust Engineer
Core
Hands-on Security Engineer responsible for operating the security program, managing customer security questionnaires, and driving SOC 2 compliance.
Role type
Senior IC Security Engineer (GRC & Operations)
Builds
Trust in customer-facing security posture, SOC 2 Type 2 compliance program, and secure cloud environment
Domain
SaaS / Industrial IoT / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Customer security questionnaire response, SOC 2 compliance management, GRC platform administration, Endpoint protection (EDR), Identity and Access Management (IAM), Vulnerability management, Security incident response, Vendor risk management
Preferred skills
Microsoft 365/Intune security baselines, Vulnerability management tooling, Security+ or CISSP certification, GDPR/ISO 27001 compliance, SaaS security review experience
Technologies
Vanta, CrowdStrike Falcon, Entra ID, Intune, KnowBe4, Jira, Notion, AWS
Responsibilities
Respond to customer security questionnaires and RFPs, maintain SOC 2 controls in Vanta, administer CrowdStrike EDR, manage identity security in Entra ID, handle vulnerability management, support security incident response, run vendor security reviews
Seniority
Senior, hands-on IC
