IT & Security Engineer

This role is approximately 80% security-focused and 20% IT operations, making it an ideal opportunity for a hands-on engineer who excels in security governance, cloud security, compliance, vulnerability management, and enterprise IT administration. The successful candidate will serve as a key stakeholder responsible for maintaining secure systems, enforcing security controls, supporting compliance initiatives, and ensuring a reliable technology environment across a distributed workforce.

Candidates with expertise in Cloudflare, compliance/audit programs, and asset management are strongly encouraged to apply. Experience supporting mobile environments is a plus.

Must-Have Qualifications

• Cloudflare administration and web security expertise
• Compliance and audit experience, including ISO 27001 and NIST frameworks
• IT asset management experience
• 5+ years of IT Systems Administration and/or Security Engineering experience
• Experience working across Windows, Linux, and macOS environments
• Strong understanding of identity and access management principles
• Excellent communication and documentation skills

Preferred Qualifications

• CISSP, CompTIA Security+, Google Professional Cloud Security Engineer, or similar certifications
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
• Experience with mobile security platforms and mobile device management solutions
• Experience in fast-paced technology or SaaS environments
• Scripting experience with Python or Bash

Key Responsibilities

Security Operations

• Lead and maintain the organization's security posture in alignment with ISO 27001 and NIST CSF 2.0.
• Manage vulnerability assessments, remediation tracking, and security incident response activities.
• Administer security monitoring tools, HIDS/SIEM platforms, and secrets management solutions.
• Conduct security awareness initiatives, phishing simulations, and end-user training.
• Manage vulnerability disclosure and bug bounty programs.

Cloud & Network Security

• Secure and administer Google Cloud Platform (GCP) environments, including IAM, logging, and security policies.
• Manage Cloudflare security technologies, including:
  • Web Application Firewall (WAF)
  • Zero Trust Access
  • DNS Security
  • API Protection
• Perform cloud and network security assessments and recommend improvements.
• Support Kubernetes security through RBAC, workload reviews, and container hardening best practices.

Identity & Access Management

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the California Fair Chance Act, City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, Los Angeles County Fair Chance Ordinance, and San Francisco Fair Chance Ordinance.