Enterprise Security Engineer

About the Position

At Oxide, we redefine corporate security as an engineering discipline. We are seeking an Enterprise Security Engineer to join our team and ensure the security of our operations, build pipeline, signing infrastructure, and systems. This role is pivotal in maintaining customer trust in our product.

Responsibilities

• Manage the security lifecycle of third-party SaaS providers: user provisioning, access control, configuration, security review, and ongoing compliance tracking.
• Manage endpoint security for corporate machines, including MDM, and determine where management tooling is appropriate.
• Secure and operate internal corporate services: access control, log forwarding, service hardening, vulnerability management, backup, and recovery.
• Build automation for compliance evidence gathering, transforming audit requests into automatic or repeatable processes.
• Participate in security incident response: triage events, investigations, report writing, and general process improvement.
• Manage security controls of physical office spaces.
• Support offline keystore operations: planning ceremonies, writing and maintaining the tooling, and taking role assignments as needed for ceremonies.
• Design backup and recovery solutions and perform periodic recovery testing.
• Work directly with auditors and compliance partners, balancing workable systems with compliance requirements.

Requirements

• Believe security’s job is to say "yes, and here’s how", not "no, and here’s why".
• Are allergic to checkbox security; care whether controls actually reduce risk.
• Have an attacker’s instincts, ideally sharpened by hands-on offensive work.
• Treat compliance as an engineering problem.
• Believe in the importance of fully documenting your ideas and enjoy reading documentation produced by others.
• Are eager to own cross-function initiatives across the company.
• Look forward to running the MDM program at Oxide.
• Are comfortable being a generalist.
• Are proficient with Rust programming.
• Are comfortable in Unix, Mac, and Windows environments.

We Offer

• Remote first: Most of our team are based outside of the Bay Area. We do ask that your workday overlaps with Pacific Time for at least four hours.
• Flexible working hours: Our schedules are flexible to support your life outside of work.
• Premium healthcare: We offer the best medical PPO, dental, and vision plans we can find and cover 100% of premiums for employees and dependents.
• Compensation: Everyone at Oxide makes $275,000 USD, regardless of location.

About the Company

We are very explicit about our values, which are reflected in our daily life at Oxide:

• Rigorous: We enjoy and take pride in the craft of engineering.
• Urgent: We are not above the judicious short-cut.
• Versatile: Our greatest strength is the breadth of our team.
• Transparent: Our consensus-driven RFD process is a testament to our transparency.
• Responsible: We both lead and follow, helping others on their parts.
• Curious: Our insatiable desire to learn and our love of teaching others show our curiosity and empathy.
• Humorous: We are inveterate wise-crackers whose video meetings spill into simultaneous text chat.

Apply Now

Authentication required. It is required that you authenticate with an email in order to apply. By clicking log in, you agree to the use of cookies that we use to authenticate your session.

Log in

Applying for:

Enterprise Security Engineer

Resume

Should be a pdf file

Materials

Please make a copy of this document and follow the instructions. When completed, please export this document as a pdf and attach it here

Optionally include relevant links