Enterprise Security Engineer

Job not on LinkedIn

🔥 3 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TRM Labs

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2018

₿ Crypto

📋 Compliance

🤝 B2B

Crypto • Compliance • B2B

TRM Labs is a blockchain intelligence company that provides transaction-monitoring, forensics, and compliance solutions for businesses and public-sector organizations dealing with cryptocurrencies. Their platform and products (examples: Compliance360, Investigation360, Seizure360, Supervision360, BlockInt API, MCP, wallet screening, Know-Your-Asset) help banks, crypto firms, regulators, law enforcement, and tax authorities detect, investigate, and block illicit crypto activity, support seizures, and meet AML/CTF and supervision requirements. TRM also offers training and certification (TRM Academy) and professional services such as incident response and capacity development.

📋 Description

• Engineer secure-by-default endpoint baselines for macOS and Windows, including encryption, firewall, application controls, device compliance, and configuration standards. • Automate and scale identity and access controls in Entra ID and Google Workspace (SSO, SCIM, conditional access, privileged access workflows, access reviews, joiner/mover/leaver). • Codify security controls as code (Terraform/configuration profiles/policy-as-code), with peer review, change history, testing/rollback, and measurable outcomes. • Build and maintain automations and integrations (e.g., n8n/SlackOps/APIs/scripts) that reduce manual access grants, speed up control changes, and eliminate repetitive workflows. • Apply AI tooling to accelerate your own engineering and triage work, and help secure how the rest of the company uses AI: sanctioned tooling, data handling guardrails, and visibility into shadow AI. • Harden SaaS and collaboration platforms by reducing unmanaged apps and enforcing strong authentication, least privilege, sharing controls, and data protection guardrails. • Improve visibility and detection by ensuring logging of endpoint, identity, and key SaaS applications. • Drive vulnerability and configuration drift reduction targets, remediation pipelines, and reporting that leadership can act on. • Partner with compliance and risk stakeholders to produce evidence, document controls, and operationalize requirements without creating brittle, manual processes. • Participate in an on-call rotation (every ~3 weeks) identity, endpoint security, and critical enterprise systems.

🎯 Requirements

• Demonstrated experience engineering and scaling endpoint security controls for macOS and Windows. • Strong IAM foundation: hands-on experience with Entra ID and Google Workspace and/or Microsoft 365 administration. • Proven ability to automate real operational workflow (Bash, PowerShell, Python, etc.). • Fluency with AI-assisted engineering: you already reach for coding agents and LLM tooling to build, review, and investigate faster, and you can judge where their output needs verification. • Strong troubleshooting and systems thinking: identity, endpoint, network controls, and SaaS integrations. • Comfort balancing security and usability using a risk-based approach, communicating tradeoffs clearly to technical and non-technical stakeholders.

🏖️ Benefits

• Health insurance • 401(k) matching • Flexible working hours • Paid time off • Remote work options