You'll also help us secure AI tools. Octus uses AI heavily, and we want someone who can make tools like Claude, Gemini, and ChatGPT safe to use at scale.
Responsibilities
Primary focus: IT and enterprise security
Own the care and feeding of our security tools. Tune policies, manage upgrades, fix integrations, and retire what we no longer need.
Manage endpoint security across Mac and Windows with Microsoft Defender, Intune, and Jamf Pro.
Manage Netskope policies for web, SaaS, and data loss prevention.
Harden identity in Okta and Microsoft Entra ID. This covers SSO, MFA, conditional access, privileged access, and admin access reviews.
Set and enforce security configuration in enterprise systems like Google Workspace, Slack, Atlassian, and other SaaS apps.
Manage email security with Abnormal Security and Google Workspace controls.
Support secrets and credential management in 1Password.
Harden AI tools like Claude, Gemini, and ChatGPT. Configure admin settings, connector and MCP controls, audit logging, and data protections.
Also in scope: the broader program
Build and tune detections in Google SecOps with our managed SOC partner.
Respond to incidents and lead post-incident reviews. Join the team on-call rotation. Calls are rare.
Track and drive remediation of cloud and code findings from Wiz and Snyk.
Partner with Engineering on AWS security and secure development practices.
Automate security work with Python, APIs, and workflow tools.
Collect evidence for SOC 2 and support client security reviews.
Assess security risk in new vendors and tools.
Mentor teammates and share what you learn across Technology.
Requirements
6+ years in cybersecurity or security-focused IT engineering.
Hands-on experience running EDR and MDM tools across Mac and Windows fleets.
Strong working knowledge of identity platforms like Okta or Entra ID, including SSO, MFA, and conditional access.
Experience hardening SaaS platforms such as Google Workspace or Microsoft 365.
Experience with SSE or secure web gateway tools, and with DLP.
Experience tuning a SIEM and responding to security incidents.
Working knowledge of SOC 2, NIST CSF, and GDPR, and how technical controls support them.
Scripting skills in Python, Bash, or PowerShell. Comfort working with REST APIs.
Clear writing and speaking with both technical and non-technical people.
Comfort working across many areas at once on a small team.
Preferred
Hands-on experience with our stack, including Okta, Microsoft Defender, Intune, Jamf Pro, Netskope, Google SecOps, or Wiz.
Experience hardening enterprise AI tools such as Claude, Gemini, or ChatGPT, including MCP servers and connectors.
Experience building security automation or workflows that cut manual work.
Certifications such as CISSP, GIAC, Security+, or a cloud security cert.
Equal Employment Opportunity
Octus is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, pregnancy, veteran status, or any other legally protected status. We strive to create an inclusive and diverse work environment where all individuals are valued, respected, and treated fairly. We believe that diversity enriches our workplace and enhances our ability to innovate and succeed.
