Security & identity Engineer

Landing Point; New York (NY); On-site; USD 150,000 - 200,000; Full time

Job summary

Landing Point is seeking a Security & Identity Engineer in New York, NY. The role focuses on strengthening endpoint security, identity management, data protection, and cloud access controls within a lean, code-driven security program.

You will own policy, investigations, and governance across CrowdStrike, Okta/Entra, email security, and cloud safeguards, while collaborating with engineering to maintain SOC 2 readiness and regulatory compliance.

Qualifications

• 5+ years of experience in security, systems administration, or infrastructure.
• Hands-on administration of identity and access systems, including user lifecycle and authentication.
• Experience implementing security controls and investigating issues.
• Comfort reading scripts and configuration, making changes with review.
• Strong troubleshooting across devices, identity, applications, and logs.
• Experience with Okta or Entra, CrowdStrike, email security, or data protection tools.
• Experience with Windows and Apple device management, Microsoft 365, or Google Workspace.
• Familiarity with Git, scripting, infrastructure as code, or building checks around AI-assisted changes.

Responsibilities

• Own endpoint protection policy and coverage in CrowdStrike Falcon Complete, including exceptions and response procedures.
• Investigate phishing, suspicious activity, and access issues, coordinating with the team as needed.
• Define and enforce email security and data protection policies through Abnormal and Nightfall.
• Own access policies and lifecycle workflows using Okta and Entra for SSO and provisioning.
• Set and maintain standards for authentication, least privilege, and access reviews.
• Define and maintain Windows and Apple device security baselines.
• Implement secure access policies through tools such as Cloudflare and Tailscale.
• Help maintain scripts and configuration using GitHub and tools like Pulumi and TypeScript.
• Build checks around manual and agent-generated changes.
• Partner with engineering on access, secrets, and security configuration for cloud services.
• Own the technical controls and evidence supporting SOC 2 readiness.
• Support regulatory recordkeeping and security requirements.

Skills

Security engineering

Systems administration

Infrastructure

Identity and access management

Tools

Okta

Entra

CrowdStrike Falcon Complete

Abnormal

Nightfall

GitHub

Pulumi

TypeScript

Cloudflare

Tailscale

Microsoft 365

Google Workspace

Job description

Company Overview:

A dynamic investment firm with a focus on concentrated public and opportunistic private investing is seeking a Security & Identity Engineer. The firm, headquartered in New York City with an additional office in San Francisco, is known for its lean technology team and secure, reliable environment managed in code.

Job Responsibilities:

• Own endpoint protection policy and coverage in CrowdStrike Falcon Complete, including exceptions and response procedures.
• Investigate phishing, suspicious activity, and access issues, coordinating with the team as needed.
• Define and enforce email security and data protection policies through Abnormal and Nightfall.
• Own access policies and lifecycle workflows using Okta and Entra for SSO and provisioning.
• Set and maintain standards for authentication, least privilege, and access reviews.
• Define and maintain Windows and Apple device security baselines.
• Implement secure access policies through tools such as Cloudflare and Tailscale.
• Help maintain scripts and configuration using GitHub and tools like Pulumi and TypeScript.
• Build checks around manual and agent-generated changes.
• Partner with engineering on access, secrets, and security configuration for cloud services.
• Own the technical controls and evidence supporting SOC 2 readiness.
• Support regulatory recordkeeping and security requirements.

Qualifications:

• 5+ years of experience in security, systems administration, or infrastructure.
• Hands‑on administration of identity and access systems, including user lifecycle and authentication.
• Practical experience implementing security controls and investigating issues.
• Comfort reading scripts and configuration, making changes with review.
• Strong troubleshooting skills across devices, identity, applications, and logs.
• Experience with Okta or Entra, CrowdStrike, email security, or data protection tools is helpful.
• Experience with Windows and Apple device management, Microsoft 365, or Google Workspace.
• Familiarity with Git, scripting, infrastructure as code, or building checks around AI-assisted changes.

Compensation:

Salary: $150,000 - $200,000, Plus Bonus