Sr. Security Engineer

Octus

About The Position

Octus is hiring a hands-on Senior Cybersecurity Engineer to own the security technology protecting its employees, endpoints, and enterprise systems. The role maintains and tunes the security stack and hardens security settings across business systems. Its primary focus is IT and enterprise security, with additional exposure to cloud security, application security, incident response, vendor risk, audits, and securing AI tools such as Claude, Gemini, and ChatGPT. The role works across a small security team and collaborates with Engineering, a managed SOC partner, and Technology teammates. It also participates in an on-call rotation, with calls described as rare. Octus is committed to equal employment opportunity and an inclusive, diverse work environment.

Requirements

At least 6 years of experience in cybersecurity or security-focused IT engineering.
Hands-on experience operating EDR and MDM tools across Mac and Windows fleets.
Strong working knowledge of identity platforms such as Okta or Entra ID, including SSO, MFA, and conditional access.
Experience hardening SaaS platforms such as Google Workspace or Microsoft 365.
Experience with SSE or secure web gateway tools and with DLP.
Experience tuning a SIEM and responding to security incidents.
Working knowledge of SOC 2, NIST CSF, and GDPR, including how technical controls support them.
Scripting skills in Python, Bash, or PowerShell, and comfort working with REST APIs.
Clear written and verbal communication with technical and non-technical audiences.
Comfort working across multiple areas on a small team.

Nice To Haves

Hands-on experience with tools in Octus's stack, including Okta, Microsoft Defender, Intune, Jamf Pro, Netskope, Google SecOps, or Wiz.
Experience hardening enterprise AI tools such as Claude, Gemini, or ChatGPT, including MCP servers and connectors.
Experience building security automation or workflows that reduce manual work.
Certifications such as CISSP, GIAC, Security+, or a cloud security certification.

Responsibilities

Own and maintain security tools by tuning policies, managing upgrades, fixing integrations, and retiring tools no longer needed.
Manage endpoint security across Mac and Windows using Microsoft Defender, Intune, and Jamf Pro.
Manage Netskope policies for web, SaaS, and data loss prevention.
Harden identity in Okta and Microsoft Entra ID, including SSO, MFA, conditional access, privileged access, and admin access reviews.
Set and enforce security configurations in Google Workspace, Slack, Atlassian, and other SaaS applications.
Manage email security with Abnormal Security and Google Workspace controls.
Support secrets and credential management in 1Password.
Harden AI tools such as Claude, Gemini, and ChatGPT by configuring admin settings, connector and MCP controls, audit logging, and data protections.
Build and tune detections in Google SecOps with the managed SOC partner.
Respond to incidents, lead post-incident reviews, and participate in the team on-call rotation.
Track and drive remediation of cloud and code findings from Wiz and Snyk.
Partner with Engineering on AWS security and secure development practices.
Automate security work using Python, APIs, and workflow tools.
Collect evidence for SOC 2 and support client security reviews.
Assess security risk in new vendors and tools.
Mentor teammates and share knowledge across Technology.