IT Security Engineer

Location: Remote - Americas; other locations: North America

Company

hirify.global provides agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, and 24/5 trading through institutional-grade APIs. Its licensed financial services subsidiaries serve financial institutions across 40 countries and more than 10 million brokerage accounts.

What you will do

• Define and maintain IAM, SSO, conditional-access, MFA, privileged-access, and joiner-mover-leaver security standards.
• Own endpoint detection and response policy, device-posture requirements, secure network access controls, and measurable identity and endpoint control enforcement.
• Maintain administrator-access baselines for SaaS platforms and vendor accounts, assess vendor security events, and coordinate with IT on operational workflows.
• Own email authentication, email security configuration, company-domain protection, lookalike-domain monitoring, and phishing triage and takedowns.
• Lead identity, endpoint, and email aspects of security incidents, including account containment, and work with Security Operations on detections and response playbooks.
• Participate in the Security Operations on-call rotation after onboarding and cross-training, while guiding IT and employees on security requirements.

Requirements

• 3+ years of experience in IT security, identity security, or security engineering roles.
• Hands-on experience with an identity provider and SSO, including SAML and OIDC.
• Experience enforcing phishing-resistant MFA, such as FIDO2 or hardware security keys.
• Hands-on experience with an endpoint detection and response platform.
• Scripting or automation experience with Python, Bash, or PowerShell.
• Experience with zero-trust network access or device-posture controls.
• Working knowledge of SPF, DKIM, DMARC, phishing response, and investigation of identity, endpoint, or email security alerts.
• Experience working closely with IT teams and translating security requirements into operational workflows.
• Willingness to participate in an on-call rotation, strong written and verbal communication skills, and the ability to handle escalations calmly and decisively.
• Alignment with hirify.global's mission and ability to work cross-functionally.

Nice to have

• Experience securing financial, trading, or other highly regulated platforms.
• Familiarity with SOC 2 or ISO 27001.
• Experience with just-in-time privileged access tools, SaaS administrator access, password managers, or company-scale secrets management.
• Experience with MDM platforms for macOS and Windows and cloud IAM in AWS, GCP, or Azure.
• Ability to balance security rigor with operational efficiency and business needs.

Culture & Benefits

• Work remotely with a 100% distributed Security Team and a globally distributed workforce.
• Competitive salary and stock options.
• Health benefits.
• One-time USD $500 new-hire home-office setup allowance.
• USD $150 monthly stipend via a Brex Card.