Enterprise Security Engineer

Join Gecko as an Enterprise Security Engineer, where you will play a crucial role in building and operating systems that protect our people, devices, applications, and sensitive data. You will work closely with IT Engineering and focus on workforce endpoint and device security, identity security, SaaS and OAuth governance, enterprise detections, and the protection of regulated data. Your responsibilities will include configuring and operating security controls, improving identity security, creating paths for AI tool adoption, building enterprise detections, and partnering with various teams on security concerns.

• Contribuer à la construction et à l'exploitation des systèmes partagés qui protègent les personnes, les appareils, les applications et les données sensibles de l'entreprise.
• Assurer la sécurité des points de terminaison et des appareils, la sécurité des identités, la gouvernance des SaaS et des OAuth, et la protection des données réglementées.
• Établir et maintenir la gouvernance pour l'adoption et l'utilisation des outils d'IA et d'autres technologies émergentes sur le lieu de travail, en veillant à ce que les exigences en matière de sécurité, de confidentialité et de conformité soient respectées.

• Commercial security frameworks (SOC2 Type II, ISO 27001, ISO 42001)
• EDR/MDR tools (e.g., CrowdStrike, TrendMicro, SentinelOne)
• Government security frameworks (FedRAMP, CMMC, NIST 800-171, NIST 800-53, CUI handling)
• AI management (e.g., Claude, ChatGPT, Cursor, Grok)
• Experience with every technology or framework is not required. Relevant technologies include:
• Identity management (e.g., Okta, Onelogin, Active Directory)
• MDM systems (e.g., Jamf, Intune, NinjaOne)
• Experience administering or securing identity and access management (IAM) platforms, including SSO, MFA, or lifecycle management
• Experience evaluating, governing, or administering SaaS applications, OAuth integrations, and enterprise security controls
• 3+ years of experience in Enterprise Security Engineering, Security Engineering, IT Security, or a related hands-on security engineering role
• Demonstrated ability to balance security and compliance requirements with business needs and user experience
• Experience working with regulated, customer-protected, or other sensitive data (e.g., CUI, HIPAA, PCI, SOC 2)
• Hands-on experience administering endpoint management and endpoint detection and response (EDR) solutions in production environments
• Excellent written and verbal communication skills, with the ability to partner effectively across Security, IT, Engineering, Compliance, Legal, and other cross-functional teams
• Strong systems configuration, troubleshooting, workflow design, and operational ownership skills
• Experience in government, defense, critical infrastructure, or another highly regulated industry, including familiarity with CUI, CMMC, FedRAMP, NIST, SOC 2, or ISO 27001
• Experience governing AI tools or other rapidly adopted workplace technology
• Experience administering CrowdStrike Falcon, Microsoft Defender, SentinelOne, or another enterprise EDR platform
• Experience administering Okta, Microsoft Intune, Jamf, or comparable identity and endpoint management platforms
• Experience with DLP, CASB, browser security, or SaaS/OAuth governance technologies
• Experience automating security or IT workflows using Python, PowerShell, Bash, or similar scripting languages
• Experience working on a small, high-growth, or startup team where security processes, tooling, and ownership were built from the ground up