Enterprise Security Engineer

Jane

18h•$98,400 - $147,600•Remote

About The Position

Join Jane as our new Enterprise Security Engineer, where you'll help harden the systems, endpoints, and identities that protect Jane and the sensitive health information our customers trust us with. You'll take on hands-on work across endpoint security, incident response, identity and access, and data protection. If you're energized by reducing real-world attack surface, comfortable owning well-scoped work end to end, and excited about using AI and automation to amplify your impact, we'd love to hear from you. As a key executor on Jane's enterprise hardening roadmap, you'll work independently on well-scoped initiatives while partnering closely with IT, Infrastructure Engineering, and the rest of Security Engineering. Much of enterprise hardening depends on other teams, so you'll make security feel like partnership rather than an obstacle: bringing people along, delivering findings constructively, and knowing when a call is yours to make versus when to pull in a more senior engineer. AI is core to how this team works, not a buzzword. We lean on AI and automation to cut toil, sharpen investigations, and move faster, and you'll be encouraged to experiment, build your own workflows, and share what works and what doesn't so the whole team levels up.

Requirements

2 to 4 years in enterprise or infrastructure security, security operations, or incident response, with a track record of taking ownership and growing your skills.
Hands-on endpoint and EDR experience (e.g., CrowdStrike Falcon) for triage, investigation, and hardening, plus incident response fundamentals and familiarity with MITRE ATT&CK.
Practical identity and access knowledge across SSO and MFA, Okta or a similar IdP, conditional access, and least-privilege principles.
Working SIEM experience investigating alerts and separating signal from noise (Datadog a plus), and a habit of building AI or automation workflows that reduce toil, and sharing what you learn.
Strong written communication and genuine collaboration skills that build trust across IT and engineering and make people want to work with you.

Nice To Haves

If you don't meet every qualification but are excited about this role, we'd still love to hear from you.

Responsibilities

Own Jane's endpoint hardening baseline, including CIS benchmark adoption, EDR coverage and tuning in CrowdStrike Falcon, and workstation and mobile vulnerability management, coordinating with IT to close findings within SLA.
Investigate, contain, and document security incidents and carry a share of the on-call rotation (roughly 5 to 6 weeks a year), escalating at the right time to the right people and keeping runbooks accurate based on real experience.
Strengthen identity and access by helping roll out phishing-resistant MFA (FIDO2), Okta device trust and conditional access, and a BYOD program, partnering with IT to keep least-privilege posture healthy across systems.
Help stand up data-protection controls (SASE, CASB, DLP, egress filtering, and PHI handling) along with the guardrails that govern internal AI usage across tools, agents, MCP servers, and their access controls.
Tune detections and signal-to-noise in our SIEM (Datadog) and build AI-assisted automation that reduces toil, sharing wins and failures openly so the whole team gets better.