Security & Trust Engineer

1 month, 2 weeks ago
Full-time
Mid Level
DevOps and Infrastructure
AssetWatch®

AssetWatch®

AssetWatch® is a leading provider of predictive maintenance solutions for industrial plants. Their cloud-based software enables proactive detection and resolution of machine issues, reducing downtime and increasing plant reliability. By combining vibra...

Construction & Engineering
51-250
Founded 2014

Description

  • Serve as the security subject matter expert on customer and prospect calls.
  • Own responses to customer security questionnaires, RFP security sections, contract reviews, and due diligence requests.
  • Maintain approved security responses, evidence, and architecture documentation.
  • Manage SOC 2 Type 2 activities, Vanta controls, audit evidence, policies, and remediation.
  • Conduct vendor security reviews and participate in organizational risk assessments.
  • Administer CrowdStrike Falcon EDR and support incident detection, investigation, and response.
  • Support Entra ID, MFA, Conditional Access, SSO, and Intune security baselines across Windows and macOS.
  • Own vulnerability management from scanning and prioritization through remediation tracking and reporting.
  • Manage security awareness training campaigns and respond to phishing, impersonation, and credential-exposure threats.
  • Document runbooks in Notion, track work in Jira, and communicate security concepts to nontechnical stakeholders.

Requirements

  • 3+ years of experience in security engineering, security analysis, GRC, or IT security.
  • Direct experience responding to customer security questionnaires and participating in customer security calls.
  • Hands-on SOC 2 experience with Vanta or a comparable platform such as Drata or Secureframe.
  • Working knowledge of endpoint detection and response tools, including CrowdStrike or similar.
  • Familiarity with identity and access management in Microsoft Entra ID, including SSO, MFA, and Conditional Access.
  • Ability to work independently in a remote, fast-moving environment while managing multiple priorities.
  • Strong written and verbal communication skills for technical and nontechnical audiences.
  • Experience with Microsoft 365, Intune, and MDM security baselines preferred.
  • Experience with vulnerability management, vendor risk management, GDPR, or ISO 27001 preferred.
  • Security+, CySA+, CISSP, or Vanta/Drata certification, and familiarity with Jira, Slack, or Notion preferred.

Benefits

  • US base salary of $126,000–$140,000, plus equity and benefits.
  • Competitive compensation package including stock options.
  • Remote-first work across the United States and Ontario, Canada.
  • Flexible work schedule with collaboration during core working hours.
  • Comprehensive benefits including retirement plan matching.
  • Unlimited PTO.
  • Opportunity to work with a growing team on impactful security initiatives.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
9 hours, 8 minutes ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
9 hours, 8 minutes ago

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

Agile Penetration Testing
9 hours, 53 minutes ago

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
1 day, 9 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers