Senior Security Engineer

🔥 3 hours ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NEAR Foundation

WebsiteLinkedInAll Job Openings

1 - 10 employees

Enabling community-driven innovation to benefit people around the world

📋 Description

• Lead the information security program across NEAR Foundation, with a dotted line into NEAR Intents’ security leadership on shared work. • Drive SOC II Type 2 and ISO 27001 readiness and ongoing compliance at NEAR AI: control design, evidence collection, auditor liaison, and remediation. • Support the needs and operation of the NEAR Security Committee (NSC). • Run logging, monitoring, and alerting; lead investigation and response for security incidents. • Run vulnerability management, third-party risk reviews, and security awareness across the organization. • Own the security architecture and hardening of our identity, access, and endpoint stack (SSO/MFA, MDM, EDR, conditional access, privileged access) — partnering with the IT Director and IT Operations team on day-to-day operations. • Engineer security and compliance automation across our SaaS estate — evidence collection, control monitoring, access reviews, and workflows that tighten controls and reduce manual work. • Be the senior technical escalation point for complex security issues across the organization. • Lead security tooling rollouts and security vendor selection; provide deep security input into the broader IT roadmap and technical due diligence. • Help maintain a secure cloud footprint (AWS / GCP) — baseline configuration, secrets management, and posture monitoring — in partnership with infrastructure and product teams. • Maintain the security policy library; ensure policies are accurate, enforced, and updated as we evolve.

🎯 Requirements

• 7+ years in information security with strong IT engineering depth, including meaningful time as a senior IC owning programs end-to-end. • Demonstrated ownership of SOC II Type 2 and ideally ISO 27001 readiness and audit cycles in a fast-moving environment. • Deep hands-on experience across IAM, endpoint, and at least one cloud (AWS or GCP). • Comfortable scripting (Python, Go, or Bash) and automating IT and security workflows. • Practical experience with SSO/IdP platforms (Okta, Google Workspace, Entra), MDM/EDR tooling, and modern logging/SIEM stacks. • Strong written communication — clear policy, clean post-incident reviews, credible audit narratives. • Pragmatic about risk and process; calm under pressure; bias to action. • Crypto or AI/ML exposure is a plus.

🏖️ Benefits

• Comprehensive healthcare coverage • Remote-first work environment • Professional development and learning budget