Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Alpaca

IT Security Engineer

Alpaca

. Own security standards and controls protecting workforce identities, endpoints, and critical business systems .

Posted 11/3/2026full-timeRemoteMid-LevelSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in IT security, identity security, and security engineering, with a strong focus on implementing and maintaining security standards for identities, endpoints, and critical business systems. Proficient in managing phishing-resistant MFA, SSO, and compliance with security frameworks.

Highest-signal resume keywords
IT Security ExperienceIdentity Provider and SSO ManagementPhishing-Resistant MFA EnforcementEndpoint Detection and ResponseEmail Authentication Knowledge

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Identity SecuritySecurity EngineeringSAMLOIDCFIDO2PythonBashPowerShellZero-Trust Network AccessDevice-Posture Controls
Soft Skills
Strong Written CommunicationStrong Verbal CommunicationCross-Functional CollaborationCalm Decision-MakingIncident Management
Tools & Technologies
Endpoint Detection and Response PlatformMDM PlatformsCloud IAMPassword ManagersSecrets Management
Certifications & Qualifications
SOC 2ISO 27001
Industry Keywords
Phishing ResponsePrivileged Access ManagementSaaS SecurityFinancial SecurityRegulated Platforms

Tech Stack

Tools & technologies
AWSAzureCloudGoogle Cloud PlatformMacOSPython

About the role

Key responsibilities & impact
  • Own security standards and controls protecting workforce identities, endpoints, and critical business systems
  • Maintain security standards, measure control effectiveness, and partner with IT on device operations and administration
  • Define and maintain SSO and conditional-access standards across cloud, SaaS, and internal systems
  • Own phishing-resistant MFA standards and enforcement
  • Maintain privileged-access standards, approval policies, and periodic access reviews
  • Partner with IT and People teams on timely, complete, and auditable joiner, mover, and leaver access changes
  • Own endpoint detection and response policy and tuning
  • Maintain device-posture and secure network-access requirements
  • Measure identity and endpoint controls and follow up on gaps
  • Partner with Security Operations on detections and response playbooks
  • Maintain administrator-access security baselines for critical SaaS platforms and vendor accounts
  • Assess identity and account impacts of vendor security events
  • Own email authentication standards and email security configuration
  • Maintain company-domain security and monitor lookalike domains
  • Triage reported phishing and coordinate takedowns
  • Lead identity, endpoint, and email aspects of security incidents, including account containment
  • Participate in the Security Operations on-call rotation after onboarding and cross-training
  • Provide IT and employees with guidance on security requirements
  • Report to the Enterprise Security Architect and collaborate with IT, DevOps, Engineering, GRC, and the wider Security team

Requirements

What you’ll need
  • Excited about Alpaca’s mission and what we’re building
  • 3+ years of experience in IT security, identity security, or security engineering roles
  • Hands-on experience with an identity provider and SSO, including SAML and OIDC
  • Experience enforcing phishing-resistant MFA, such as FIDO2 or hardware security keys
  • Hands-on experience with an endpoint detection and response platform
  • Scripting or automation experience (Python, Bash, or PowerShell)
  • Experience with zero-trust network access or device-posture controls
  • Working knowledge of email authentication (SPF, DKIM, DMARC) and phishing response
  • Experience working closely with IT teams and translating security requirements into operational workflows
  • Experience investigating identity, endpoint, or email security alerts
  • Willing to participate in an on-call rotation
  • Strong written and verbal communication skills, especially during incidents
  • Comfortable working cross-functionally and handling escalations calmly and decisively
  • Experience securing financial, trading, or other highly regulated platforms
  • Familiarity with compliance frameworks such as SOC 2 or ISO 27001
  • Experience with just-in-time privileged access tools
  • Experience securing administrator access to SaaS platforms
  • Experience with password managers and secrets management at company scale
  • Experience with MDM platforms for macOS and Windows
  • Experience with cloud IAM in AWS, GCP, or Azure
  • Ability to balance security rigor with operational efficiency and business needs

Benefits

Comp & perks
  • Competitive Salary & Stock Options
  • Health Benefits
  • New Hire Home-Office Setup: One-time USD $500
  • Monthly Stipend: USD $150 per month via a Brex Card