IT Security Engineer

Job not on LinkedIn

🔥 1 hour ago

🏈 North America – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 25%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Alpaca

WebsiteLinkedInAll Job Openings

201 - 500 employees

🔌 API

💳 Fintech

₿ Crypto

API • Fintech • Crypto

Alpaca is a fintech company that provides a comprehensive brokerage and trading platform through a suite of APIs. These APIs enable developers and businesses to integrate algorithmic trading, app development, and embedded investing into their services. Alpaca offers services like trading in US stocks, ETFs, and cryptocurrency with options for local currency transactions. The company is recognized for its cyber security practices and is a member of FINRA and SIPC. Alpaca is ideal for fintech startups, broker-dealers, hedge funds, and other financial services looking to build sophisticated trading applications and platforms with minimal friction through their well-documented Broker API.

📋 Description

• Own security standards and controls protecting workforce identities, endpoints, and critical business systems • Maintain security standards, measure control effectiveness, and partner with IT on device operations and administration • Define and maintain SSO and conditional-access standards across cloud, SaaS, and internal systems • Own phishing-resistant MFA standards and enforcement • Maintain privileged-access standards, approval policies, and periodic access reviews • Partner with IT and People teams on timely, complete, and auditable joiner, mover, and leaver access changes • Own endpoint detection and response policy and tuning • Maintain device-posture and secure network-access requirements • Measure identity and endpoint controls and follow up on gaps • Partner with Security Operations on detections and response playbooks • Maintain administrator-access security baselines for critical SaaS platforms and vendor accounts • Assess identity and account impacts of vendor security events • Own email authentication standards and email security configuration • Maintain company-domain security and monitor lookalike domains • Triage reported phishing and coordinate takedowns • Lead identity, endpoint, and email aspects of security incidents, including account containment • Participate in the Security Operations on-call rotation after onboarding and cross-training • Provide IT and employees with guidance on security requirements • Report to the Enterprise Security Architect and collaborate with IT, DevOps, Engineering, GRC, and the wider Security team

🎯 Requirements

• Excited about Alpaca’s mission and what we’re building • 3+ years of experience in IT security, identity security, or security engineering roles • Hands-on experience with an identity provider and SSO, including SAML and OIDC • Experience enforcing phishing-resistant MFA, such as FIDO2 or hardware security keys • Hands-on experience with an endpoint detection and response platform • Scripting or automation experience (Python, Bash, or PowerShell) • Experience with zero-trust network access or device-posture controls • Working knowledge of email authentication (SPF, DKIM, DMARC) and phishing response • Experience working closely with IT teams and translating security requirements into operational workflows • Experience investigating identity, endpoint, or email security alerts • Willing to participate in an on-call rotation • Strong written and verbal communication skills, especially during incidents • Comfortable working cross-functionally and handling escalations calmly and decisively • Experience securing financial, trading, or other highly regulated platforms • Familiarity with compliance frameworks such as SOC 2 or ISO 27001 • Experience with just-in-time privileged access tools • Experience securing administrator access to SaaS platforms • Experience with password managers and secrets management at company scale • Experience with MDM platforms for macOS and Windows • Experience with cloud IAM in AWS, GCP, or Azure • Ability to balance security rigor with operational efficiency and business needs

🏖️ Benefits

• Competitive Salary & Stock Options • Health Benefits • New Hire Home-Office Setup: One-time USD $500 • Monthly Stipend: USD $150 per month via a Brex Card

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume