IT Security Engineer

Insurify•Cambridge, MA

3d•Hybrid

About The Position

Insurify is hiring an IT Security Engineer to help design and enforce security controls to protect systems, data, and infrastructure while ensuring alignment with regulatory and industry standards. This role will be working cross-functionally across the org on long-term projects as Insurify continues to scale. This is a hybrid position that requires candidates to be able to come into our Cambridge, MA office.

Requirements

Bachelor's degree in computer science or a related field.
At least 3+ years of relevant experience in IT security required.
Working knowledge of frameworks such as PCI and NIST CSF are required.
Experience with SIEM, DLP, and vulnerability management.
Expertise with Mac, Windows, enterprise IT, AWS cloud infrastructure, common threats, and core security tools.
Understanding of data privacy laws and industry-specific regulations.
Clear, concise communication of complex technical risk to both technical and executive audiences.

Responsibilities

Configure, troubleshoot, and maintain security infrastructure software and hardware, including SIEM, DLP, anti-malware, and intrusion response systems.
Align security controls and practices with external regulations, internal policies, and security frameworks (e.g., NIST CSF, PCI).
Evaluate and monitor employee-adopted AI platforms, third-party LLM integrations, and data connectors to prevent unauthorized access and exposure of sensitive company data.
Conduct risk assessments and threat/vulnerability analyses across systems and networks.
Recommend, implement, and validate security controls and best practices to reduce risk.
Continuously monitor systems for threats and validate the effectiveness of implemented controls.
Develop incident response plans and manage post-incident reviews.
Monitor evolving threats, regulations, and industry trends to continually enhance the security program.
Assist the IT team with responding to general user requests for access, troubleshooting, etc.