Security Operations Engineer

Role overview

• You'll own the day-to-day security operations of our corporate and cloud environments: hands-on, execution-focused work securing the tools, endpoints and infrastructure our teams rely on.
• You'll implement and maintain our security posture across our productivity suite, device fleet, VPN and identity stack and cloud environment.
• This is a build-and-harden role for someone who likes getting into the weeds. As you grow into it, there's a clear path toward owning the security function more broadly.

What you'll do

Corporate & endpoint security

• Administer and harden our identity and access stack, including password management and VPN/network-access tooling.
• Configure and enforce device policies through mobile device management - disk encryption, screen-lock, patching baselines, app control and compliance rules across the fleet.
• Manage endpoint protection and keep patching and vulnerability remediation on a predictable cadence.
• Harden our productivity and collaboration suite: access controls, 2FA/MFA enforcement, admin roles and data-sharing/DLP settings.
• Own onboarding/offboarding from a security angle - provisioning, de-provisioning and access reviews.

Cloud security

• Harden our AWS environment: IAM policies and least-privilege access, account and organisation guardrails, security groups and network segmentation.
• Implement and monitor logging and detection
• Manage secrets, key management and encryption at rest and in transit.
• Review infrastructure changes for security impact and work with engineering to close gaps.

Testing & assurance

• Run internal and continuous security testing: vulnerability scanning, configuration audits and attack-surface reviews.
• Conduct hands-on internal penetration testing against our own systems where appropriate.
• Scope, coordinate and manage external penetration-test vendors for formal independent assessments, then track and drive remediation of findings.
• Maintain security documentation, run tabletop exercises and support our compliance and audit obligations.

What we're looking for

• Proven hands-on experience in security operations, IT security or cloud security engineering - someone who has actually configured MDM, hardened AWS, and administered identity tooling, not just written policy about it.
• Solid working knowledge of Cloud security services and cloud hardening.
• Comfortable across at least one MDM platform, a VPN/ZTNA solution and a password-management tool.
• Practical familiarity with vulnerability scanning and penetration-testing tools and methodologies.
• Scripting ability (Python, Bash or similar) for automation.
• A methodical, ownership-driven mindset - you close loops and document as you go.
  

What we offer

• • Semi remote-friendly setup with flexibility built around outcomes and business priorities.
  • Strong ownership culture: you’ll ship meaningful systems and keep improving them after launch - no “throw it over the wall.”
  • Education budget for courses, certifications, conferences, and learning resources.
  • Team lunch once per week (on us).
  • Monthly gym allowance.
  • Private health insurance.
  • Collaborative environment: you’ll work closely with technical and non-technical stakeholders and with clear communication.
  
  

Contact us to apply

If you are a proactive and motivated individual who thrives in a fast-paced environment, we invite you to apply