Enterprise Security Engineer

Join Jane as our new Enterprise Security Engineer, where you'll help harden the systems, endpoints, and identities that protect Jane and the sensitive health information our customers trust us with.

You'll take on hands-on work across endpoint security, incident response, identity and access, and data protection. If you're energized by reducing real-world attack surface, comfortable owning well-scoped work end to end, and excited about using AI and automation to amplify your impact, we'd love to hear from you.

What Impact We're Looking For You To Make

• Own Jane's endpoint hardening baseline, including CIS benchmark adoption, EDR coverage and tuning in CrowdStrike Falcon, and workstation and mobile vulnerability management, coordinating with IT to close findings within SLA.

• Investigate, contain, and document security incidents and carry a share of the on-call rotation (roughly 5 to 6 weeks a year), escalating at the right time to the right people and keeping runbooks accurate based on real experience.

• Strengthen identity and access by helping roll out phishing-resistant MFA (FIDO2), Okta device trust and conditional access, and a BYOD program, partnering with IT to keep least-privilege posture healthy across systems.

• Help stand up data-protection controls (SASE, CASB, DLP, egress filtering, and PHI handling) along with the guardrails that govern internal AI usage across tools, agents, MCP servers, and their access controls.

• Tune detections and signal-to-noise in our SIEM (Datadog) and build AI-assisted automation that reduces toil, sharing wins and failures openly so the whole team gets better.

What Experience We Think We Need

• 2 to 4 years in enterprise or infrastructure security, security operations, or incident response, with a track record of taking ownership and growing your skills.

• Hands-on endpoint and EDR experience (e.g., CrowdStrike Falcon) for triage, investigation, and hardening, plus incident response fundamentals and familiarity with MITRE ATT&CK.

• Practical identity and access knowledge across SSO and MFA, Okta or a similar IdP, conditional access, and least-privilege principles.

• Working SIEM experience investigating alerts and separating signal from noise (Datadog a plus), and a habit of building AI or automation workflows that reduce toil, and sharing what you learn.

• Strong written communication and genuine collaboration skills that build trust across IT and engineering and make people want to work with you.