Strong Middle Information Security Engineer

Intro:

Dive deep into Digital! For 20 years Intellias has been developing top-tier digital solutions for the world’s leading companies, keeping them in line with the latest technology trends. Join in and provide innovations for the future!

Project Overview:

Our Client is a dynamic startup based out of New York, US. Team is currently working on a core product - a web-based solution. Product is live and scope of work includes both new features & enhancements to existing code, re-architecture of various components, bugfixing and solving technical challenges of a fast growing product.

We are looking for driven and curious Senior Information Security Specialist who will be the cornerstone of client's endpoint and cloud security strategy. This person will play a pivotal role in safeguarding data, devices, and systems as client scales. This is a hands-on, leadership position that will own the security posture of our desktops, laptops, mobile devices, and Google Workspace environment. You will be instrumental in designing, implementing, and maintaining robust security measures to protect our growing organization from evolving threats.

Required:

• 4+ years of experience in a dedicated information security role, with a strong focus on endpoint and cloud security.
• Extensive experience managing Mobile Device Management (MDM) solutions.
• In-depth knowledge of Google Workspace security features, settings, and best practices.
• Proven experience configuring and managing SSO/SAML integrations, particularly with Google Workspace as the identity provider.
• Strong understanding of security principles, including authentication, authorization, encryption, and network security.
• Experience with vulnerability management and remediation processes.
• Excellent problem-solving, analytical, and communication skills.
• Ability to work independently and as part of a team in a fast-paced, dynamic environment.
• A great team player beaming positive energy
• Excellent English and proactive communication skills. Demonstrated pattern of driving solutions and best practice adoption.
• Experience working in a startup or high-growth environment.
• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.

Preferred:

• hands-on experience with CrowdStrike Falcon administration, including deployment, configuration, threat hunting, and incident response.
• Relevant industry certifications such as CISSP, CISM, GIAC certifications (e.g., GSEC, GCIA, GCIH), or Google Cloud certifications.
• Experience with scripting languages (e.g., Python, PowerShell) for automation.
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, NIST, or GDPR

Responsibilities:

Endpoint Security

• Architect, implement, and manage our endpoint security strategy, encompassing desktops,
• laptops, and mobile devices (iOS and Android).
• Serve as the primary administrator and subject matter expert for our Endpoint Detection and
• Response (EDR) platform, CrowdStrike Falcon. This includes deployment, configuration, threat hunting, incident response, and reporting.
• Deploy, configure, and maintain Mobile Device Management (MDM) solutions to enforce
• security policies, manage device inventory, and ensure data protection on mobile devices
• Oversee vulnerability management for all endpoints, including regular scanning, patching, and remediation efforts.

Google Workspace Security

• Administer and optimize the security configuration of our Google Workspace environment, including Gmail, Drive, Calendar, Meet, and other core applications.
• Implement and manage data loss prevention (DLP) policies within Google Workspace to protect sensitive information and ensure compliance with relevant regulations.
• Conduct regular security audits and assessments of our Google Workspace setup to identify and mitigate potential vulnerabilities.
• Stay current with Google Workspace security best practices and updates, proactively implementing new features and enhancements.

Identity and Access Management

• Design and manage SSO / SAML integrations between Google Workspace and other web-based business applications, streamlining user access and enhancing security.
• Oversee user provisioning, de-provisioning, and access control policies across all systems, ensuring least privilege access principles are followed.

Security Operations & Incident Response

• Develop and maintain security policies, procedures, and standards, ensuring alignment with industry best practices and regulatory requirements.
• Monitor security logs, alerts, and dashboards, proactively identifying and responding to security incidents.
• Participate in the incident response process, conducting investigations, containment, eradication, and recovery efforts.
• Contribute to the development and execution of security awareness training programs for all employees.

Collaboration and Communication

• Work closely with IT, Engineering, and other teams to ensure security is integrated into all aspects of the business.
• Provide technical guidance and mentorship to other team members on security-related matters.
• Communicate effectively with stakeholders at all levels, providing clear and concise updates on security posture, risks, and incidents.