IT Security Engineer III

About This Role

As an IT Security Engineer III, you will provide expertise in designing, engineering, and deploying security solutions across FloQast's corporate environment. You will act as an internal security entrepreneur, collaborating with cross-functional teams to ensure high-impact projects adhere to security best practices and compliance frameworks.

Responsibilities

• Design, implement, and maintain corporate IT security systems in partnership with other FloQast IT teams, ensuring compliance
• Lead third-party vendor and contractor security reviews
• Audit and harden 3rd party SaaS systems for security best practices and lead remediation efforts
• Ensure security configurations across the corporate environment are documented and maintained
• Regularly triage security events and ensure ongoing health of the Managed Detection & Response (MDR) partner
• Own the analysis and documentation of security events & incidents, including investigation, escalation, and participation in security event escalations
• Maintain existing compliance attestations and participate in risk assessment exercises
• Lead vulnerability management efforts, ensuring issues are triaged, prioritized, and remediated according to defined SLAs
• Maintain and secure internal corporate endpoints (macOS and Windows)
• Administer endpoint management platform for enterprise-wide monitoring and dashboarding
• Participate in Agile scrum ceremonies for project and initiative tracking
• Lead security awareness and training programs
• Stay abreast of new and emerging security technologies and paradigms

Requirements

• 6-8 years as a Security Engineer, DevOps, or IT security professional
• In-depth knowledge of common compliance frameworks e.g. SOC, SOX, PCI, and ISO standards
• Experience using at least one high-level programming/scripting language
• Ability to lead cross-functional initiatives and communicate proposals and ideas to stakeholders concisely
• Experience balancing commercial objectives with security and compliance obligations
• Advanced understanding of network and application fundamentals and best practices e.g. HTTP/S, DNS, VPN, Load Balancing, SAML, OAuth, and other modern protocols
• Experience with cloud environments AWS, GCP, or Azure
• Experience with zero-trust security concepts
• Experience securing multi-tenant enterprise SaaS products
• Experience with hardening tools and frameworks such as CIS benchmarks, NIST

Qualifications

• Bachelor’s degree in the field of Information Technology, Computer Science, and/or relevant industry certification a plus
• 6-8 years as a Security Engineer, DevOps, or IT security professional

Nice to Have

• 5-7 years experience working within an IT team in a hyper-growth environment or startup
• Experience in B2B SaaS is strongly preferred
• Experience supporting onsite and remote workforce
• Experience with deployment of DLP and/or SASE solution(s)
• Experience administering a policy-based Enterprise Web Browser
• Experience or participation in automation initiatives of employee onboarding and off boarding processes
• Experience with iPaaS/orchestration platforms, especially Workato
• Bachelor’s degree in the field of Information Technology, Computer Science, and/or relevant industry certification

Skills

* Required skills

Benefits