Strong Middle Information Security Engineer

• Endpoint Security
  • Architect, implement, and manage our endpoint security strategy, encompassing desktops.
    laptops, and mobile devices (iOS and Android).
  • Serve as the primary administrator and subject matter expert for our Endpoint Detection and
    Response (EDR) platform, CrowdStrike Falcon. This includes deployment, configuration, threat hunting, incident response, and reporting. 
  • Deploy, configure, and maintain Mobile Device Management (MDM) solutions to enforce
    security policies, manage device inventory, and ensure data protection on mobile devices.
  • Oversee vulnerability management for all endpoints, including regular scanning, patching, and remediation efforts.
• Google Workspace Security
  • Administer and optimize the security configuration of our Google Workspace environment, including Gmail, Drive, Calendar, Meet, and other core applications. 
  • Implement and manage data loss prevention (DLP) policies within Google Workspace to protect sensitive information and ensure compliance with relevant regulations. 
  • Conduct regular security audits and assessments of our Google Workspace setup to identify and mitigate potential vulnerabilities. 
  • Stay current with Google Workspace security best practices and updates, proactively implementing new features and enhancements.
• Identity and Access Management
  • Design and manage SSO / SAML integrations between Google Workspace and other web-based business applications, streamlining user access and enhancing security.
  • Oversee user provisioning, de-provisioning, and access control policies across all systems, ensuring least privilege access principles are followed.
• Security Operations & Incident Response
  • Develop and maintain security policies, procedures, and standards, ensuring alignment with industry best practices and regulatory requirements.
  • Monitor security logs, alerts, and dashboards, proactively identifying and responding to security incidents.
  • Participate in the incident response process, conducting investigations, containment, eradication, and recovery efforts.
  • Contribute to the development and execution of security awareness training programs for all employees.
• Collaboration and Communication
  • Work closely with IT, Engineering, and other teams to ensure security is integrated into all aspects of the business.
  • Provide technical guidance and mentorship to other team members on security-related matters. 
  • Communicate effectively with stakeholders at all levels, providing clear and concise updates on security posture, risks, and incidents.

Required:

• 4+ years of experience in a dedicated information security role, with a strong focus on endpoint and cloud security. 
• Extensive experience managing Mobile Device Management (MDM) solutions. 
• In-depth knowledge of Google Workspace security features, settings, and best practices. 
• Proven experience configuring and managing SSO/SAML integrations, particularly with Google Workspace as the identity provider. 
• Strong understanding of security principles, including authentication, authorization, encryption, and network security. 
• Experience with vulnerability management and remediation processes. 
• Excellent problem-solving, analytical, and communication skills.
• Ability to work independently and as part of a team in a fast-paced, dynamic environment.
• A great team player beaming positive energy
• Excellent English and proactive communication skills. Demonstrated pattern of driving solutions and best practice adoption.
• Experience working in a startup or high-growth environment. 
• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience. 

Preferred:

• Hands-on experience with CrowdStrike Falcon administration, including deployment, configuration, threat hunting, and incident response.
• Relevant industry certifications such as CISSP, CISM, GIAC certifications (e.g., GSEC, GCIA, GCIH), or Google Cloud certifications.
• Experience with scripting languages (e.g., Python, PowerShell) for automation. 
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, NIST, or GDPR