Remote Security Compliance Engineer — IAM & Incident Response

Syllo; United States; Remote; USD 180,000 - 200,000; Full time

Job summary

Syllo is seeking a Security Engineer to own the technical security layer for our compliance program, including Vanta, SSO, endpoint security, and incident response. This is an engineering role focused on building and operating controls for SOC 2 and ISO 27001, not policy creation.

You will work across cloud infrastructure to endpoints, ensuring defensible controls in an enterprise audit. Remote US operations with strong compensation and benefits are offered.

Qualifications

• 3+ years in security engineering or DevSecOps with hands-on implementation.
• Experience implementing Vanta or comparable compliance automation tooling.
• Proficiency with cloud security controls in AWS, GCP, or Azure.
• Security certification (Security+, AWS Security Specialty, or equivalent) preferred.
• Bachelor’s degree in computer science, information security, or a related field preferred.

Responsibilities

• Own security infrastructure: Implement, configure, and monitor the technical controls that support SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
• Manage identity and access: Design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
• Run endpoint security: Manage device enrollment, MDM policy, and endpoint compliance across a distributed team.
• Run technical incident response: Own detection, triage, and technical response. Maintain runbooks that hold up under pressure.
• Enforce and verify data segregation: Implement the controls that enforce customer data isolation and verify them against contractual data handling obligations.

Skills

Security engineering

IAM design

Cloud security

Incident response

Least-privilege enforcement

Education

Bachelor's degree in CS/Info Security

Tools

Vanta

Okta

Google Workspace

MDM platforms

Job description

Syllo is seeking a Security Engineer to own the technical security layer for our compliance program, including Vanta, SSO, endpoint security, and incident response. This is an engineering role focused on building and operating controls for SOC 2 and ISO 27001, not policy creation.

You will work across cloud infrastructure to endpoints, ensuring defensible controls in an enterprise audit. Remote US operations with strong compensation and benefits are offered.