The Role

TripleLift is seeking a Security IT Engineer to join our team full-time. We are an established company in the advertising technology sector, trying to tackle some of the most challenging problems facing the industry. You will join a rapidly growing and complex environment and work as part of a small team responsible for developing, evangelizing, and executing our security roadmap. You’ll help drive improvements in our security operations capability and support critical projects, enhancing our detect-and-respond capabilities.

Responsibilities

• Lead IT Security projects to envision, define, and implement improved cyber-security processes and systems.
• Conduct regular vulnerability assessments to identify and remediate any weaknesses in our IT systems and SaaS platforms.
• Coordinate with third-party SOC and associated log feeds and SOC-generated tickets, including providing input to improve analysis and visibility continuously.
• Configure mobile device management tools to update software device settings and monitor compliance with organizational policies
• Utilize endpoint privilege management software to secure endpoints and enforce the least privilege without disrupting the business.
• Configure and manage security monitoring tools related to protecting servers, endpoints, and the data within, including SIEM and EDR
• Coordinate IT operations (patching, upgrades, solving, downtime planning, periodic backup/restoration testing, etc.) between business partners, IT administrators, and end-users
• Advocate for existing Security standards, policies, and procedures while encouraging innovation and improvements.
• Lead and oversee the design and development of authentication solutions that enforce applicable organizational security policies and access management requirements.
• Provide mentorship for ongoing corrective and preventative maintenance to improve the reliability and availability of the Security environment. Drive the team to discover the root cause of failures and be responsible for remediations to prevent reoccurrence.
• Create and manage security procedure documentation.
• Prepare reports and presentations for IT and Security Management and support security audits.
• Evangelize security best practices and provide education and awareness to company employees.
• Evaluate and continuously improve the maturity of the security program through the deployment and management of various security tools and processes

Desired Skills and Attributes

• 3+ years as an IT security engineer or similar role
• Experience with Okta Administration
• Expertise with SSO/SAML/OIDC implementation with Auth0/Okta
• Experience with popular endpoint protection tools such as Crowdstrike, CyberArk, CloudFlare, etc.
• Experience with popular mobile device management platforms such as InTune, Kandji, JAMF, etc.
• Extensive understanding of IAM concepts such as directory services, SSO, federations, MFA, provisioning, access certification, roles, and SOD.
• Proven track record working in information security operations, engineering, architecture, or security consulting.
• Able to design and evaluate general security controls, as well as how to create adequate compensating controls where necessary
• Experience managing tools in a Security Operations Center environment, i.e., monitoring and reacting to SIEM alerts/events
• Comfortable taking ownership of projects and showcasing key accomplishments
• Strives for continued learning opportunities to build upon craft
• Values correctness and efficiency and has an exceptional eye for detail
• Ability to work quickly and independently with minimal oversight

#LI-CS1