Privacy-First Security Engineer — IAM, Endpoint & Network

Cape; New York (NY); On-site; USD 150,000 - 220,000; Full time

Benefits offered by this job

401(k) match

Medical/dental/vision premiums covered

12 weeks paid parental leave

Stipends for family-forming needs

Gender-affirming care stipend

Unlimited PTO

Job summary

Cape is seeking an experienced Security Engineer to strengthen corporate security across identity, endpoints, networks, and data. You will partner with IT, engineering, and business teams to design, implement, and maintain robust security measures that meet regulatory standards and minimize risk.

Lead security programs, mentor engineers, and drive secure practices while collaborating with stakeholders to align security with business goals in a privacy-first environment.

Qualifications

• Bachelor's degree in CS/Info Security or equivalent experience.
• 2+ years in information security across identity, endpoint, network, and GRC.
• Deep understanding of enterprise identity providers and SSO/MFA platforms.
• Familiarity with SOC 2, ISO 27001 compliance frameworks.
• SSDLC experience and secure design collaboration with engineering.
• Scripting in Python or shell to automate security operations.

Responsibilities

• Design and manage security controls across corporate IT systems.
• Own IAM/SSO/MFA, endpoint security (EDR/MDM), and email security.
• Conduct security assessments of systems and vendors; mitigate risks.
• Establish governance and monitoring for employee tooling and data handling.
• Lead vulnerability management lifecycle across the corporate fleet.
• Drive security awareness and phishing simulations.
• Support audits and vendor security reviews with context.
• Manage third‑party risk assessments and security questionnaires.

Skills

Security expertise

Analytical thinking

Collaboration

Communication

Decision making

Dependability

Customer centric

Flexibility

Planning & organization

Education

Bachelor's degree in Computer Science, Information Security, or related field

CISSP / GIAC / Security+ / CISM advantageous

Tools

SSO/MFA platforms

EDR

MDM

Email security tooling

VPN

Job description

Cape is seeking an experienced Security Engineer to strengthen corporate security across identity, endpoints, networks, and data. You will partner with IT, engineering, and business teams to design, implement, and maintain robust security measures that meet regulatory standards and minimize risk.

Lead security programs, mentor engineers, and drive secure practices while collaborating with stakeholders to align security with business goals in a privacy-first environment.