reliable-robotics - Security Engineer: Infrastructure and Client Platform

• In your role as Security Engineer you will be responsible for the design, implementation and monitoring of security tools supporting the business’ internal needs and safety requirements. You will be involved in securing daily drivers, as well as supporting development infrastructure for our products. • EDR and client security: Partnering with the client platform team, and working with affected users, you will be responsible for enforcing security configurations on all endpoints (macOS, Windows, iOS, Android) utilizing the appropriate tools for the job. • Identity and Access Management: Design and maintain manageable access control schemes, manage SaaS AAA and provide zero-trust designs (and implementations) for SSO. • Automation & Infra: Meet the automation requirements of the team by taking advantage of infrastructure as code systems in supported use, building reproducible solutions with adequate documentation to repair and manage those systems and being open to critique. • Incident Response and Ops work: Be able to perform Log Analysis, participate in threat hunting exercises and be capable of investigating security alerts from EDR or externally provided IOCs. • Collaboration and resilience: At Reliable we design robust systems for the purpose at hand that are easy to maintain. We demand the same level of collaboration and resiliency between our teams and our systems. • BASIC SUCCESS CRITERIA • 5+ years of experience in an IT/Infrastructure Security, Security Operations (SecOps), or Corporate Infrastructure Security role. • Strong, fundamental understanding of endpoint operating systems (macOS and Windows 11) and how to securely configure them at scale via MDM platforms (e.g., Jamf, Intune, Kandji). • Deep understanding of SSL certificates, PKI infrastructure, and credential management. • Solid networking fundamentals and understanding of secure network architecture (VLAN segmentation, Zero Trust Network Access/ZTNA, Firewalls, WiFi security). • Scripting proficiency in languages such as Python, Bash, or PowerShell to automate security operations and log ingestion. • Experience with modern endpoint protection tools (EDR/XDR) and log management/SIEM platforms. • This position requires access to information that is subject to U.S. export controls. An offer of employment will be contingent upon the applicant’s capacity to perform in compliance with U.S. export control laws. • All applicants are asked to provide documentation that legally establishes status as a U.S. person or non-U.S. person (and nationalities in the case of a non-U.S. person). Where the applicant is not a U.S. person, meaning not a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident, (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, or not otherwise permitted to access the export-controlled technology without U.S. government authorization, the Company reserves the right not to apply for an export license for such applicants whose access to export-controlled technology or software source code requires authorization and may decline to proceed with the application process and any offer of employment on that basis.