IT and Data Security Specialist

LexHive (Formerly DemandLane); India; À distance; INR 1 800 000 - 3 600 000; Plein temps

Avantages offerts par ce poste

Remote-first flexibility

High-agency culture

Ownership of high-visibility function

Growth opportunities

Résumé du poste

LexHive (Formerly DemandLane) seeks a senior IT and Data Security Specialist to join our engineering team focused on the US market. This hands-on role owns IT, security, and access management with independent judgment and proactive system improvements.

You will manage the full user lifecycle, device provisioning, IAM, MFA, and security audits, while maintaining runbooks and evidence across a remote-first, high-agency culture.

Qualifications

• 4+ years in IT and Data Security or similar role for a distributed team.
• Hands-on experience with macOS, Linux and Windows.
• Experience with least privilege, MFA enforcement and endpoint hardening.
• Secrets management and credential rotation experience.
• AWS and/or GCP IAM and access control experience.
• DNS and Cloudflare exposure and governance.
• Security audits with actionable remediation plans.
• VPN setup and management.
• Strong documentation and ability to write clear guides.
• Excellent written English and ability to work across time zones.
• Discretion handling privileged access and data.

Responsabilités

• Run full user lifecycle onboarding/offboarding across SaaS platforms, cloud environments, code repositories, VPN, the password manager, and AI tools, using a documented checklist and audit trail.
• Set up and maintain macOS, Linux, and Windows devices remotely.
• Manage MDM/UEM and endpoint security for all devices that access company data, including full-disk encryption.
• Manage VPN and network access controls.
• Manage AWS/GCP IAM, Security Groups, firewall rules, and access reviews.
• Manage secrets, API keys, and tokens (storage, rotation, and revocation).
• Review cloud storage (e.g., S3) for public exposure and enforce data retention policies.
• Govern access to AI/LLM tools and the data sent to them, including PII redaction.
• Own vulnerability and dependency management in partnership with engineering.
• Manage DNS and Cloudflare (records, proxying, WAF).
• Plan and run security audits and drive remediation.
• Lead response to access and security incidents (credential leaks, data exposure, compromised accounts).
• Design secure, restricted work environments for teams that handle sensitive data.
• Run phishing and social-engineering awareness training.
• Own SOPs, runbooks, and KB articles.
• Maintain audit trails and data access governance.
• Complete client and vendor security questionnaires and maintain the supporting evidence.

Connaissances

macOS

Linux

Windows

MFA enforcement

Least privilege

Secrets management

AWS IAM

GCP IAM

Cloudflare DNS

Security audits

VPN setup

Documentation

English writing

Time-zone coordination

Outils

Terraform

CloudFormation

Nessus

Qualys

Tailscale

Cloudflare Access

Bash scripting

Python

PowerShell

Description du poste

We are looking for an IT and Data Security Specialist to join our high-impact engineering team, which is focused on the US market. This is a senior, hands-on role, not a helpdesk position. You will own IT, security, and access management for the company, operate with independent judgment, and proactively improve systems rather than react to issues.

Responsibilities

• Run the full user lifecycle (onboarding and offboarding) across core SaaS platforms, cloud environments, code repositories, VPN, the password manager, and AI tools, using a documented checklist and audit trail.
• Set up and maintain macOS, Linux, and Windows devices remotely.
• Manage MDM/UEM and endpoint security for all devices that access company data, including full-disk encryption.
• Manage VPN and network access controls.
• Manage AWS/GCP IAM, Security Groups, firewall rules, and access reviews.
• Manage secrets, API keys, and tokens (storage, rotation, and revocation).
• Review cloud storage (e.g., S3) for public exposure and enforce data retention policies.
• Govern access to AI/LLM tools and the data sent to them, including PII redaction.
• Own vulnerability and dependency management in partnership with engineering.
• Manage DNS and Cloudflare (records, proxying, WAF).
• Plan and run security audits and drive remediation.
• Lead response to access and security incidents (credential leaks, data exposure, compromised accounts).
• Design secure, restricted work environments for teams that handle sensitive data.
• Run phishing and social-engineering awareness training.
• Own SOPs, runbooks, and KB articles.
• Maintain audit trails and data access governance.
• Complete client and vendor security questionnaires and maintain the supporting evidence.

Requirements

• 4+ years in an IT and Data Specialist or similar role supporting a distributed team.
• Hands-on macOS, Linux, and Windows.
• Least privilege, MFA enforcement, and endpoint hardening.
• Secrets and credential management (password managers, API keys, rotation).
• AWS and/or GCP IAM and access control.
• DNS and Cloudflare.
• Security audits with actionable remediation plans.
• VPN setup and management.
• Strong documentation skills, including guides that non-technical teammates can follow.
• Strong written English and comfort working asynchronously across time zones.
• Sound judgment and discretion when handling privileged access and sensitive data.
• Should be comfortable working with US Overlapping hours

Preferred Skills

• Zero-trust tools (Tailscale, Cloudflare Access).
• Scripting (Bash, Python, PowerShell).
• Vulnerability scanning tools (Nessus, Qualys).
• Terraform or CloudFormation.
• SOC 2/ISO 27001 exposure.
• Experience completing client or vendor security questionnaires.

What We Offer

• Competitive, performance-linked compensation - we pay for impact.
• Opportunity to work alongside experienced leaders
• Ownership of a high-visibility engineering function with real strategic influence.
• A fast-moving environment where your ideas ship quickly and your growth is real.
• Remote-first flexibility with a collaborative, high-agency culture.