Sr. Security Engineer

Octus | Financial Data and Analytics

6h 56m ago

Remote In-Country

Full Time

United States of America

Title: Sr. Security Engineer Location: Remote - US

Octus

Octus is a leading global provider of credit intelligence, data, and analytics. Since 2013, tens of thousands of professionals across hedge fund, investment banking, management consulting, and law firm verticals have come to rely on Octus to make better, faster, and more confident decisions in pace with the fast-moving credit markets.
For more information, visit:

Working at Octus

Octus hires growth-minded innovators and trailblazers across the globe to drive our business and culture. Our core values – Action Oriented, Customer First Mindset, Effective Team Players, and Driven to Excel – define an organizational ethos that’s as high-performing as it is human. Among other perks, Octus employees enjoy competitive health benefits, matched 401k and pension plans, PTO, generous parental leave, gym subsidies, educational reimbursements for career development, recognition programs, and much more.
Role

We're hiring a hands-on Senior Cybersecurity Engineer to own the security technology that protects Octus employees, endpoints, and enterprise systems. You'll keep our security stack healthy and well tuned, and you'll harden the security settings in the business systems people use every day.

Our security team is small, so this role is broad. Your main focus is IT and enterprise security. You'll also work on cloud security, application security, incident response, vendor risk, and audits. Anyone who joins gets real exposure across the whole program.

You'll also help us secure AI tools. Octus uses AI heavily, and we want someone who can make tools like Claude, Gemini, and ChatGPT safe to use at scale.

Responsibilities

Primary focus: IT and enterprise security

Own the care and feeding of our security tools. Tune policies, manage upgrades, fix integrations, and retire what we no longer need.
Manage endpoint security across Mac and Windows with Microsoft Defender, Intune, and Jamf Pro.
Manage Netskope policies for web, SaaS, and data loss prevention.
Harden identity in Okta and Microsoft Entra ID. This covers SSO, MFA, conditional access, privileged access, and admin access reviews.
Set and enforce security configuration in enterprise systems like Google Workspace, Slack, Atlassian, and other SaaS apps.
Manage email security with Abnormal Security and Google Workspace controls.
Support secrets and credential management in 1Password.
Harden AI tools like Claude, Gemini, and ChatGPT. Configure admin settings, connector and MCP controls, audit logging, and data protections.

Also in scope: the broader program

Build and tune detections in Google SecOps with our managed SOC partner.
Respond to incidents and lead post-incident reviews. Join the team on-call rotation. Calls are rare.
Track and drive remediation of cloud and code findings from Wiz and Snyk.
Partner with Engineering on AWS security and secure development practices.
Automate security work with Python, APIs, and workflow tools.
Collect evidence for SOC 2 and support client security reviews.
Assess security risk in new vendors and tools.
Mentor teammates and share what you learn across Technology.

Requirements

6+ years in cybersecurity or security-focused IT engineering.
Hands-on experience running EDR and MDM tools across Mac and Windows fleets.
Strong working knowledge of identity platforms like Okta or Entra ID, including SSO, MFA, and conditional access.
Experience hardening SaaS platforms such as Google Workspace or Microsoft 365.
Experience with SSE or secure web gateway tools, and with DLP.
Experience tuning a SIEM and responding to security incidents.
Working knowledge of SOC 2, NIST CSF, and GDPR, and how technical controls support them.
Scripting skills in Python, Bash, or PowerShell. Comfort working with REST APIs.
Clear writing and speaking with both technical and non-technical people.
Comfort working across many areas at once on a small team.

Preferred

Hands-on experience with our stack, including Okta, Microsoft Defender, Intune, Jamf Pro, Netskope, Google SecOps, or Wiz.
Experience hardening enterprise AI tools such as Claude, Gemini, or ChatGPT, including MCP servers and connectors.
Experience building security automation or workflows that cut manual work.
Certifications such as CISSP, GIAC, Security+, or a cloud security cert.

Equal Employment Opportunity

Octus is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, pregnancy, veteran status, or any other legally protected status. We strive to create an inclusive and diverse work environment where all individuals are valued, respected, and treated fairly. We believe that diversity enriches our workplace and enhances our ability to innovate and succeed.

Required Skills

oktaentra_idmicrosoft_defenderintune

Required Languages

🇬🇧 English

Responsibilities

Primary focus: IT and enterprise security

Own the care and feeding of our security tools. Tune policies, manage upgrades, fix integrations, and retire what we no longer need.

Manage endpoint security across Mac and Windows with Microsoft Defender, Intune, and Jamf Pro.

Manage Netskope policies for web, SaaS, and data loss prevention.

Harden identity in Okta and Microsoft Entra ID. This covers SSO, MFA, conditional access, privileged access, and admin access reviews.

Set and enforce security configuration in enterprise systems like Google Workspace, Slack, Atlassian, and other SaaS apps.

Manage email security with Abnormal Security and Google Workspace controls.

Support secrets and credential management in 1Password.

Harden AI tools like Claude, Gemini, and ChatGPT. Configure admin settings, connector and MCP controls, audit logging, and data protections.

Also in scope: the broader program

Build and tune detections in Google SecOps with our managed SOC partner.

Respond to incidents and lead post-incident reviews. Join the team on-call rotation. Calls are rare.

Track and drive remediation of cloud and code findings from Wiz and Snyk.

Partner with Engineering on AWS security and secure development practices.

Automate security work with Python, APIs, and workflow tools.

Collect evidence for SOC 2 and support client security reviews.

Assess security risk in new vendors and tools.

Mentor teammates and share what you learn across Technology.

Requirements

6+ years in cybersecurity or security-focused IT engineering.

Hands-on experience running EDR and MDM tools across Mac and Windows fleets.

Strong working knowledge of identity platforms like Okta or Entra ID, including SSO, MFA, and conditional access.

Experience hardening SaaS platforms such as Google Workspace or Microsoft 365.

Experience with SSE or secure web gateway tools, and with DLP.

Experience tuning a SIEM and responding to security incidents.

Working knowledge of SOC 2, NIST CSF, and GDPR, and how technical controls support them.

Scripting skills in Python, Bash, or PowerShell. Comfort working with REST APIs.

Clear writing and speaking with both technical and non-technical people.

Comfort working across many areas at once on a small team.

Preferred

Hands-on experience with our stack, including Okta, Microsoft Defender, Intune, Jamf Pro, Netskope, Google SecOps, or Wiz.

Experience hardening enterprise AI tools such as Claude, Gemini, or ChatGPT, including MCP servers and connectors.

Experience building security automation or workflows that cut manual work.

Certifications such as CISSP, GIAC, Security+, or a cloud security cert.

Equal Employment Opportunity