IT Security Engineer II (Contract) - FloQast

Work in partnership with other FloQast IT teams to design, implement, and maintain corporate IT security systems

Assist with third-party vendor and contractor security reviews

Audit 3rd party SaaS systems for security best practices and lead remediation efforts

Regularly triage security events with our Managed Detection & Response (MDR) partner

Assist with the analysis of security events & incidents, including investigating and escalating issues and participating in security event escalations

Maintaining existing compliance attestations and participating in risk assessment exercises

Assist with vulnerability management efforts, ensuring issues are triaged, prioritized, and remediated according to defined SLA’s

Assist with maintaining and securing internal corporate endpoints (macOS and Windows)

Assist with administering our endpoint management platform for enterprise-wide monitoring and dashboarding

Participate in IT Sprint cadence for project and initiative tracking

Assist with security awareness and training programs

Stay abreast of new and emerging security technologies and paradigms

4 - 6 years as a Security Engineer or IT security professional

Proficiency in writing custom scripts & queries to drive technical decisions and ensure repeatable, auditable configuration changes

Experience balancing commercial objectives and initiatives with security and compliance obligations

Foundational understanding of network and application fundamentals and best practices, e.g., HTTP/S, DNS, VPN, Load Balancing, SAML, OAuth, and other modern cloud/SaaS protocols

Experience with cloud environments AWS, GCP, Okta, or Azure/Entra ID (AWS preferred)

Experience enforcing security policies across macOS and Windows endpoints

Strong sense of ownership, urgency, and drive

Experience with zero-trust security concepts

Experience securing multi-tenant enterprise SaaS products

Experience with hardening tools and frameworks such as CIS benchmarks, NIST

Knowledge of common compliance frameworks e.g., SOC, SOX, PCI, and ISO standards