Security Engineer II

About the role

This role will be responsible for creating and maintaining a SaaS product and platform that is resilient against advanced threats to the confidentiality, integrity, and availability of our organization.

Daily tasks will include designing and building security controls, operating security tooling, and collaborating with various stakeholders to ensure the security of our products and services.

As a Security Engineer II at Starburst you will:

• Develop and implement security measures to protect our company's information assets against unauthorized access, disclosure, or misuse.
• Monitor internal and external systems for security threats and respond to alerts.
• Contribute to and enforce our company's IT and Security policies and procedures.
• Work closely with our IT department to harden our infrastructure using best practices in Okta, GSuite, Github, and other SaaS tooling.
• Devise novel sharing controls and associated monitoring to protect company data, including intelligent groups management, Data Loss Prevention (DLP) and other security controls as appropriate.
• Employ forward-thinking models like “secure by default” and “zero trust” to create sustainably secure environments for knowledge workers and developers.
• Identify and remediate vulnerabilities in our internal systems, adhering to best practices for data security.
• Educate employees on the importance of data security, and advise them on best practices for maintaining a secure environment.
• Contribute to Starburst Data’s endpoint and cloud security roadmaps by staying up to date with the latest security threats, and making recommendations for improving our security posture.

Some of the things we look for:

• Experience in protecting and managing macOS fleets.
• Experience deploying and managing endpoint security solutions (e.g. management frameworks, EDR tools).
• Experience with public cloud service providers (e.g. Amazon AWS, Microsoft Azure).
• Experience with identity and access management frameworks and protocols, including SAML, OAUTH, and SCIM.
• Experience with e-mail security protocols (e.g. SPF, DKIM, DMARC) and controls.
• Intermediate or advanced proficiency with a scripting language (e.g. Python, Bash, or similar).
• Knowledge of modern adversary tactics, techniques, and procedures.
• Ability to empathize and collaborate with colleagues, independently manage and run projects, and prioritize efforts for risk reduction.
• Ability to Travel: This role will require occasional in-person travel for purposes including but not limited to new hire onboarding, team and department offsites, customer engagements, and other company events. Actual travel expectations may vary by role and business needs.

Where could this role be based?

• Boston, MA
• San Fransisco, CA