Enterprise Security Engineer

Join Jane as our new Enterprise Security Engineer , where you'll help harden the systems, endpoints, and identities that protect Jane and the sensitive health information our customers trust us with.

You'll take on hands-on work across endpoint security, incident response, identity and access, and data protection. If you're energized by reducing real-world attack surface, comfortable owning well-scoped work end to end, and excited about using AI and automation to amplify your impact, we'd love to hear from you.

What Impact We're Looking For You To Make

• Own Jane's endpoint hardening baseline, including CIS benchmark adoption, EDR coverage and tuning in CrowdStrike Falcon , and workstation and mobile vulnerability management, coordinating with IT to close findings within SLA.

• Investigate, contain, and document security incidents and carry a share of the on-call rotation (roughly 5 to 6 weeks a year), escalating at the right time to the right people and keeping runbooks accurate based on real experience.

• Strengthen identity and access by helping roll out phishing-resistant MFA ( FIDO2), Okta device trust and conditional access, and a BYOD program, partnering with IT to keep least-privilege posture healthy across systems.

• Help stand up data-protection controls (SASE, CASB, DLP, egress filtering, and PHI handling) along with the guardrails that govern internal AI usage across tools, agents, MCP servers, and their access controls.

• Tune detections and signal-to-noise in our SIEM ( Datadog ) and build AI-assisted automation that reduces toil, sharing wins and failures openly so the whole team gets better.

What Experience We Think We Need

• 2 to 4 years in enterprise or infrastructure security, security operations, or incident response, with a track record of taking ownership and growing your skills.

• Hands-on endpoint and EDR experience (e.g., CrowdStrike Falcon ) for triage, investigation, and hardening, plus incident response fundamentals and familiarity with MITRE ATT&CK .

• Practical identity and access knowledge across SSO and MFA, Okta or a similar IdP, conditional access, and least-privilege principles.

• Working SIEM experience investigating alerts and separating signal from noise ( Datadog a plus), and a habit of building AI or automation workflows that reduce toil, and sharing what you learn.

• Strong written communication and genuine collaboration skills that build trust across IT and engineering and make people want to work with you.