Security Engineer

InfoSec EngineerResponsibilitiesCompliance & GovernanceLead clients through SOC 2 and ISO 27001 audits, from readiness assessment and remediation through evidence collection and auditor coordinationManage the firm's internal compliance program using VantaDevelop compliance roadmaps tied to client growth stages, fundraising, and IPO preparationWrite and maintain security policies (incident response, access control, acceptable use, AI usage, BCDR, WISP) aligned with NIST, SEC Reg S-P, GDPR, and CCPAVendor Risk & Client AssuranceBuild and maintain client Trust Centers and complete security questionnaires (SIG, CAIQ, RFPs) Assess new vendors and AI tools and advise clients on adoptionMaintain vendor inventories, risk tiers, and attestations, and refine the TPRM processSecurity EngineeringDeploy and manage EDR (SentinelOne) and MDM (Jamf, Mosyle, Intune) across Mac and Windows environmentsStrengthen identity and access controls with Okta, MFA, and 1PasswordSecure Google Workspace, Microsoft 365, and other SaaS and cloud platformsSecurity OperationsTriage alerts across endpoint, identity, email, and cloud, and lead incident response and post incident reviewsOwn vulnerability management and pen test remediationMaintain logging and SIEM sources, and run access reviews and configuration auditsRun security awareness training and phishing simulations (KnowBe4, Adaptive) Requirements3 to 5+ years in information security or IT, including 2+ years of hands-on compliance workExperience taking a company through a full audit using Vanta, Drata, or SecureframeHands-on EDR and MDM administrationOkta or Entra ID experienceGoogle Workspace or Microsoft 365 security, plus experience with a major cloud platformVulnerability management and incident response experienceSolid grasp of SOC 2, ISO 27001, and NIST CSF, with the ability to write audit-ready policiesNice to HaveSecurity+, CISSP, CISA, or ISO 27001 Lead ImplementerMSP or consulting backgroundSEC Reg S-P, SOX ITGC, or IPO readiness experienceAI tool risk assessmentsPython, PowerShell, or Bash scripting