Senior IT Security Engineer

Alloy is where you belong!

Alloy helps solve the identity risk problem for companies that offer financial products by enabling them to outpace fraud and confidently serve more people around the world. Over 600 of the world’s largest financial institutions and fintechs turn to Alloy to take control of fraud, credit, and compliance risk, and grow with the clearest picture of their customers.

Through our values: Be Bold, Get Scrappy, Collaborate, and Celebrate Our Differences, we are creating a workplace where you can grow, thrive, and belong. See how we’ve been continuously recognized and named one of Inc. Magazine’s Best Workplaces, Forbes America’s Best Startup Employers, Best Fintech to Work for by American Banker, year after year.

Check out our investors and read more about us here.

About the team

This role is a part of the Security Operations team at Alloy, which is a dynamic team responsible for managing and improving the company's IT and corporate security infrastructure by implementing robust security protocols, ensuring proper data governance, maintaining reliable IT systems, and providing the appropriate level of access to tools and data for authorized users. 

The team is also responsible for supporting the business continuity of the organization as it pertains to the Alloy HQ office and network, hardware and equipment, software and SaaS solutions.

What you'll be doing

Security is the lens by which we try to look through when solving problems, from managing the security of endpoints (EDR) to protecting the company’s data (DLP) to ensuring secure e-communication, in particular via email and instant messaging on Slack. An ideal candidate will have a strong background in security operations, incident response, and a drive for staying ahead of emerging threats.

Responsibilities may include but are not limited to:

• End-user support & on-call rotation 
  • Desktop and browser based application support
  • Hardware troubleshooting
  • Access provisioning
  • Improving the support experience both for the end-users and the team internally
• Endpoint Security & Mobile Device Management: 
  • Ensure the integrity and security of endpoints with patch management, application updates, and use of malware detection tools, such as Crowdstrike 
  • Participate in security incident response and make improvements to the process
  • Integrate security tools with SIEM to centralize monitoring by collaborating with other Infrastructure & Security teams 
• Physical / office & network security 
  • Asset management to maintain full and organized control over all Alloy-purchased devices and equipment
  • Maintenance of the primary and backup network stacks at the HQ office
• SaaS Tools & Access Management: 
  • Implement SSO or other forms of managed authentication over the use of username and passwords
  • Automate provisioning and deprovisioning of access via role or attribute based access control
  • Practice Principle of Least Privilege 
  • Streamline and implement processes for SaaS management across the org
• Email Security: 
  • Assist with email security measures to mitigate risk and protect sensitive information
  • Monitor email traffic for suspicious activities, phishing attempts, and malware-infected attachments

Who we’re looking for

Qualifications:

• Bachelor's degree in Information Security, Computer Science, or related field
• 5+ years of experience working in a fast-paced, technically driven IT or security operations teams 
• Experience with deploying and managing EDR / other security solutions, such as Crowdstrike, Sophos, Defender, etc.
• Experience working with both Mac and Windows machines, preferably with experience using Jamf and Microsoft Endpoint Manager / Intune
• Familiarity with IDPs, such as Okta, OneLogin, etc.
• Certifications such as CompTIA Network+, Security+ a plus
• Familiarity with security frameworks such as NIST a plus
• Willingness to come into the office 3 days a week
• Experience with mentoring individuals and being an approachable team member

We're a lean team, so your impact will be felt immediately, and opportunities will grow as the company scales up. If this all sounds l