Enterprise Security Engineer

As an Enterprise Security Engineer at Paperclip, you will be responsible for implementing and managing the security of our internal information systems’ infrastructure and processes. You will work closely with our IT and Security teams to develop robust security capabilities, enforce security policies, and monitor internal systems for security threats, ensuring the safety and integrity of our data.

This role is remote and available globally, offering flexibility and the opportunity to work with a diverse team from around the world.

In this role, you will:

• Develop and implement security measures to protect our company’s information assets against unauthorized access, disclosure, or misuse.
• Monitor internal and external systems for security threats and respond to alerts.
• Contribute to and enforce our company’s IT and Security policies and procedures.
• Collaborate with the IT department to harden our infrastructure using best practices in AzureAD, GSuite, GitHub, and other SaaS tooling.
• Advise employees on best practices for maintaining the security of their endpoints, and office AV and network infrastructure.
• Devise novel sharing controls and associated monitoring to protect company data, including intelligent group management, Data Loss Prevention (DLP), and other security controls as appropriate.
• Employ forward-thinking models like “secure by default” and “zero trust” to create sustainably secure environments for knowledge workers and developers.
• Identify and remediate vulnerabilities in our internal systems, adhering to best practices for data security.
• Use AI-driven models to develop systems for improved security detection and response, data classification, and other security-related tasks.
• Educate employees on the importance of data security and advise them on best practices for maintaining a secure environment.
• Contribute to Paperclip’s endpoint and cloud security roadmaps by staying up to date with the latest security threats and making recommendations for improving our security posture.

You might thrive in this role if you have:

• Experience in protecting and managing macOS fleets.
• Experience deploying and managing endpoint security solutions (e.g., management frameworks, EDR tools).
• Experience with public cloud service providers (e.g., Amazon AWS, Microsoft Azure).
• Experience with identity and access management frameworks and protocols, including SAML, OAuth, and SCIM.
• Experience with email security protocols (e.g., SPF, DKIM, DMARC) and controls.
• Intermediate or better proficiency with a scripting language (e.g., Python, Bash, or similar).
• Knowledge of modern adversary tactics, techniques, and procedures.
• Ability to empathize and collaborate with colleagues, independently manage and run projects, and prioritize efforts for risk reduction.