SpotMe - Security Operations Engineer (Europe - Remote)

Europe (Remote) - Hybrid3w ago

In Office EMEA Software Security Engineer Reporting Slack Google Workspace REST

Requirements

• Working across multiple areas of security rather than specialising in one, in combination with “standard IT activities”. Identity, endpoints, tool configuration and logging all sit in this role, and none of them get a dedicated person. • Judging the balance between security that limits people and what the business actually needs to get done. Knowing which control is worth the friction and which one will simply be worked around. • Because of our business, users often need immediate action. Some tickets can wait a week and some arrive as a Slack message because a customer event is happening now. Judging which is which, without treating everything as urgent or making people escalate to get attention, is a daily call. • Google Workspace as an identity platform, including SSO and SAML app integration, groups and org units, admin roles and delegation, context-aware access, the security and admin audit logs and the alerts built on them • Understanding the usage of APIs, minimally knowledge around REST and HTTP methods status codes, authentication via API keys, OAuth 2.0

Responsibilities

• You have a complete inventory of our tools and of how access to each one is granted and removed. • You know which accounts exist across those tools and which of them map to a real person. • You run onboarding, offboarding and access requests independently, without escalation. • You have given us your first read on the environment: the three or four things you would fix first, why each one matters, and what it would take. • You have a view of the security settings in each cloud/SaaS tool we use, what each is capable of enforcing, and what it currently enforces. • You have recommended the changes worth making in priority order, and the first of them are already applied. • You have produced the plan and the recommendation for the new endpoint management and protection: the options, the obstacles we will hit, and how you would get past them. • New endpoint management and protection are running across the fleet and you can report coverage. • There is one place that shows who has access to what across all tools, and access reviews run from it and produce the evidence export. • The new Security Dashboard is built to the point where a real investigation can be done in it.