New

Sr. Security Engineer

Remote - US

Octus

Octus is a leading global provider of credit intelligence, data, and analytics. Since 2013, tens of thousands of professionals across hedge fund, investment banking, management consulting, and law firm verticals have come to rely on Octus to make better, faster, and more confident decisions in pace with the fast-moving credit markets.
For more information, visit: https://octus.com/

Working at Octus

Octus hires growth-minded innovators and trailblazers across the globe to drive our business and culture. Our core values – Action Oriented, Customer First Mindset, Effective Team Players, and Driven to Excel – define an organizational ethos that’s as high-performing as it is human. Among other perks, Octus employees enjoy competitive health benefits, matched 401k and pension plans, PTO, generous parental leave, gym subsidies, educational reimbursements for career development, recognition programs, and much more. 

Role

We're hiring a hands-on Senior Cybersecurity Engineer to own the security technology that protects Octus employees, endpoints, and enterprise systems. You'll keep our security stack healthy and well tuned, and you'll harden the security settings in the business systems people use every day.

Our security team is small, so this role is broad. Your main focus is IT and enterprise security. You'll also work on cloud security, application security, incident response, vendor risk, and audits. Anyone who joins gets real exposure across the whole program.

You'll also help us secure AI tools. Octus uses AI heavily, and we want someone who can make tools like Claude, Gemini, and ChatGPT safe to use at scale.

Responsibilities

Primary focus: IT and enterprise security

  • Own the care and feeding of our security tools. Tune policies, manage upgrades, fix integrations, and retire what we no longer need.
  • Manage endpoint security across Mac and Windows with Microsoft Defender, Intune, and Jamf Pro.
  • Manage Netskope policies for web, SaaS, and data loss prevention.
  • Harden identity in Okta and Microsoft Entra ID. This covers SSO, MFA, conditional access, privileged access, and admin access reviews.
  • Set and enforce security configuration in enterprise systems like Google Workspace, Slack, Atlassian, and other SaaS apps.
  • Manage email security with Abnormal Security and Google Workspace controls.
  • Support secrets and credential management in 1Password.
  • Harden AI tools like Claude, Gemini, and ChatGPT. Configure admin settings, connector and MCP controls, audit logging, and data protections.

Also in scope: the broader program

  • Build and tune detections in Google SecOps with our managed SOC partner.
  • Respond to incidents and lead post-incident reviews. Join the team on-call rotation. Calls are rare.
  • Track and drive remediation of cloud and code findings from Wiz and Snyk.
  • Partner with Engineering on AWS security and secure development practices.
  • Automate security work with Python, APIs, and workflow tools.
  • Collect evidence for SOC 2 and support client security reviews.
  • Assess security risk in new vendors and tools.
  • Mentor teammates and share what you learn across Technology.

Requirements

  • 6+ years in cybersecurity or security-focused IT engineering.
  • Hands-on experience running EDR and MDM tools across Mac and Windows fleets.
  • Strong working knowledge of identity platforms like Okta or Entra ID, including SSO, MFA, and conditional access.
  • Experience hardening SaaS platforms such as Google Workspace or Microsoft 365.
  • Experience with SSE or secure web gateway tools, and with DLP.
  • Experience tuning a SIEM and responding to security incidents.
  • Working knowledge of SOC 2, NIST CSF, and GDPR, and how technical controls support them.
  • Scripting skills in Python, Bash, or PowerShell. Comfort working with REST APIs.
  • Clear writing and speaking with both technical and non-technical people.
  • Comfort working across many areas at once on a small team.

Preferred

  • Hands-on experience with our stack, including Okta, Microsoft Defender, Intune, Jamf Pro, Netskope, Google SecOps, or Wiz.
  • Experience hardening enterprise AI tools such as Claude, Gemini, or ChatGPT, including MCP servers and connectors.
  • Experience building security automation or workflows that cut manual work.
  • Certifications such as CISSP, GIAC, Security+, or a cloud security cert.

Equal Employment Opportunity

Octus is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, pregnancy, veteran status, or any other legally protected status. We strive to create an inclusive and diverse work environment where all individuals are valued, respected, and treated fairly. We believe that diversity enriches our workplace and enhances our ability to innovate and succeed.

Create a Job Alert

Interested in building your career at Octus? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...

The name provided above should be your full legal name.

Please use this section to indicate any preferred names you would like to be recognized by, if different from your legal name.

Select...

If answered 'No' to the above, please enter "N/A"

Select...

If answered 'No' to the above, please enter "N/A"

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Octus’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...