Information Technology Security Specialist

AssetWorks Inc; San Antonio (TX); On-site; USD 70,000 - 100,000; Full time

Job summary

AssetWorks is seeking an IT Security Specialist to operate endpoint security tools and manage employee provisioning from day one through offboarding. This hands-on role lives in the Tech Services & Data Security team and reports to the Manager, Tech Services & Data Security.

You will perform daily tasks in CrowdStrike Falcon, Automox, Cloudflare Zero Trust, and 1Password, escalating complex issues to the Manager. Strong judgment and solid documentation are essential.

Qualifications

• 2-4 years in IT support or related IT operations.
• Experience with onboarding/offboarding, provisioning, and access administration.
• Hands-on work in endpoint security tools (EDR, SIEM, patch management).
• Able to navigate admin GUIs and learn tool-specific training.

Responsibilities

• Operate endpoint security tooling daily (EDR, SIEM, patch management) and escalate non-routine items to the Manager.
• Handle employee onboarding/offboarding: provisioning, accounts, access grants, credential setup.
• Provide internal IT support for hardware, accounts, and basic troubleshooting.
• Assist with compliance evidence/documentation for audit cycles related to endpoints and access controls.

Skills

IT support

Provisioning

Endpoint security tools

Documentation

Communication

Tools

CrowdStrike Falcon

Automox

Cloudflare Zero Trust

1Password

Job description

Reports To: Manager, Tech Services & Data Security

FLSA Status: Exempt

About the Role

AssetWorks is hiring an IT Security Specialist to handle the daily operation of our endpoint security tools and manage the full employee provisioning lifecycle. This role sits within the Tech Services & Data Security team, reporting to the Manager, Tech Services & Data Security, who retains overall ownership of our security tooling strategy and final decision authority on security matters.

You'll be the person actively working in our security tools every day, running routine operations and handling standard issues on your own, while recognizing when something needs to go to the Manager rather than being handled solo. This isn't a subject matter expert role: we're looking for someone comfortable navigating these platforms day to day and exercising good judgment about what to elevate, not someone who needs to design our security strategy.

We're looking for a high performer for this seat, someone who takes ownership of their day-to-day scope without needing it broken down for them, stays on top of routine tasks consistently, and knows when to bring something to the Manager rather than let it sit.

This is a hands-on, internally facing role covering employees from day one through offboarding.

What You'll Do

Endpoint Security Tooling (Daily Operation)

• Work daily in CrowdStrike Falcon, handling routine endpoint detection and response activity and escalating anything beyond standard procedure to the Manager
• Manage Automox day to day for patch deployment and configuration compliance on employee endpoints
• Administer routine Cloudflare Zero Trust access changes for remote and on-site staff
• Review SIEM alerts daily, handle routine findings per established procedure, and escalating anything ambiguous or high-risk to the Manager
• Run recurring vulnerability scans, close out routine remediation items, and escalating significant findings or exceptions to the Manager

Access Documentation & Provisioning

• Maintain a master privilege inventory across all internal systems, documenting exactly what access each employee holds, so access reassignment and offboarding disconnection are fast and complete
• Execute new hire onboarding: hardware provisioning, account creation, system access grants, and credential setup (1Password)
• Execute offboarding: timely access revocation, device return and wipe, and audit trail documentation
• Maintain and improve onboarding/offboarding documentation and checklists in Confluence
• Explore automation or scripted/agent-based tooling to keep the privilege inventory current without manual upkeep

Internal IT Support

• Serve as a point of contact for internal IT support tickets (hardware, account access, basic troubleshooting)
• Coordinate with the broader Tech Services team when internal tooling is involved in an incident

Compliance Support

• Gather and provide evidence and documentation for compliance audit cycles as it relates to endpoint and access controls
• Partner with the Compliance-focused teammate on shared control support; this role handles day-to-day tooling and documentation, while compliance ownership and audit strategy sit elsewhere

What You'll Bring

• 2-4 years of experience in IT support, provisioning, or a related IT operations role
• Experience with employee onboarding/offboarding, provisioning, and account/access administration, this is the core skill for the role
• Comfort working hands-on in endpoint security tools day to day (EDR, SIEM, patch management); we're not looking for a subject matter expert, just someone capable of running daily operations in these platforms
• Comfort navigating admin GUIs for business tools and learning new platforms quickly; we'll provide tool-specific training on CrowdStrike, Automox, and Cloudflare Zero Trust
• Good judgment on when to handle something directly versus when to elevate to the Manager, and a clear sense of the right escalation path when something looks like a real security issue
• Strong documentation habits, this role will maintain and be measured against onboarding/offboarding and access-inventory documentation
• Clear communicator who can support non-technical employees through IT issues without friction

Preferred Skills

• Direct hands-on experience with CrowdStrike Falcon, Automox, Cloudflare Zero Trust, or 1Password
• Comfort with scripting or AI-assisted automation to keep documentation and inventories current with less manual effort
• Exposure to SOC 2 or similar compliance frameworks from the technical control side
• Security certifications (Security+ or similar) a plus, not a requirement