Senior IT Security Engineer in Miami

Energy Jobline ZR; Miami (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Simpro Group, a Miami-based pioneer of AI-powered field service software, seeks a Senior IT Security Engineer onsite to own IT security and compliance, including SOC 2 and ISO 27001, reporting to the IT Director.

This role focuses on sustaining certification posture, managing risk across physical, logical, and systems layers, advising engineering teams, and leading incident response to protect customer data and core platforms.

Qualifications

• Hands-on security expertise across IAM, network segmentation, and cloud config.
• Experience deploying EDR/MDR and endpoint policy standards.
• Knowledge of SOC 2 and ISO 27001 programs.
• Ability to advise engineering teams without formal authority.
• Strong risk communication with non-security stakeholders.
• Experience with vendor risk management or third-party due diligence.
• Certification cycle management experience is a plus.

Responsibilities

• Security & Compliance: strengthen SOC 2/ISO 27001 posture and lead certification initiatives.
• Risk Management: maintain risk register across physical, logical, and system exposures.
• IAM: audit shared credentials, improve SSO and network authentication.
• Security Operations & Endpoint Protection: deploy EDR/MDR, manage policies, secure remote access.
• Engineering Security Advisory: advise product engineering on secure config and vulnerabilities.
• Vendor & Third-Party Risk: assess SaaS vendors and review security posture.
• Incident Response: build playbooks and lead tabletop exercises.

Skills

Technical depth

EDR/MDR deployment

IAM & network security

Security advisory to engineering

Communication with stakeholders

SOC 2 / ISO 27001 knowledge

Certification lifecycle

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

GRC tooling (Vanta/Drata/Secureframe)

Job description

Job Description

Senior IT Security Engineer

Miami - onsite

Simpro Group is a pioneer of Al-powered field service software serving over 250,000 users worldwide. Headquartered in Miami, we've been transforming how trades and field service businesses operate since 2013, connecting jobs, people, and performance across plumbing, HVAC, fire & security, facilities management, electrical contracting, and more.

As we grow, we need a Senior IT Security Engineer to sustain and strengthen our certification posture, covering frameworks such as SOC 2 and ISO 27001, while owning the day-to-day security of our internal IT environment.

This position is onsite in Miami Monday - Friday.

The Role

This is a senior individual contributor role based onsite in downtown Miami, reporting to the IT Director. You'll own IT security and compliance end to end, with real autonomy in day-to-day execution while strategy is shaped jointly with IT leadership. On the product engineering side, this role is a technical sounding board, advisory rather than an owner of engineering's process.

Protecting customer data, meeting our compliance obligations, and safeguarding core systems are never up for negotiation. Beyond that, this role calls for sound judgment on where security effort delivers the most protection without slowing the business down.

What You'll Own

• Security & Compliance: Sustain and strengthen our certification posture across frameworks such as SOC 2 and ISO 27001, lead new certification initiatives as needed, select and implement a Governance, Risk, and Compliance (GRC) platform, and manage prospect and customer security questionnaires
• Risk Management: Build and maintain the risk register across physical, logical, and systems- level exposure, and prioritize remediation
• & Access Management (IAM): Audit and remediate shared credential and generic account exposure, improve architecture including SSO consolidation and network authentication
• Security Operations & Endpoint Protection: Select and stand up our EDR/MDR capability, maintain group policy and endpoint standards, secure remote connectivity, own data protection practices, and address physical security risks tied to IT-managed systems like door access technology
• Engineering Security Advisory: Serve as a sounding board to product engineering on secure configuration, secrets handling, and vulnerability management, in an advisory capacity
• Vendor & Third-Party Risk: Assess new and existing SaaS vendors, review security posture and trust documentation on a recurring basis
• Incident Response: Build playbooks, run tabletop exercises, and lead response when incidents occur

What We're Looking For

• Hands-on technical depth in and access architecture, not just policy writing
• Experience selecting and standing up EDR/MDR, and maintaining endpoint and group policy standards
• Experience across both logical security (IAM, network segmentation, cloud config) and physical security practices
• Comfortable advising engineering teams you don't manage, credible enough that they value your input even without formal authority
• Strong communicator who can explain risk and tradeoffs to non-security stakeholders
• Solid working understanding of how SOC 2 and ISO 27001 programs run, close enough to the process to have done real work in it, not just relaying auditor requests.
• Owning a certification cycle start to finish is a plus, not a requirement, since you'll work alongside outside compliance consultants who guide the harder parts of the process

Experience & Education

• 6+ years in information security or a closely related IT discipline
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or an equivalent combination of professional experience and industry certifications

Nice to Have

• CISSP, CISA, or ISO 27001 Lead Implementer/Auditor certification
• Experience with GRC tooling such as Vanta, Drata, or Secureframe
• Background in vendor risk management or third-party due diligence

Our Technology Landscape

What matters here is how you reason about risk, not which specific tool you've used before. You'll work across and access systems, cloud infrastructure, collaboration and Al tooling, and vulnerability management platforms, spanning both our internal IT environment and our product engineering pipeline.

Our Core Values

• We Are One Team
• We Are Customer Centric
• We Are Growth Minded
• We Are Accountable
• We Celebrate Success

Simpro, AroFlo, BigChange & ClockShark are equal opportunity employers. We want everyone to feel welcome and to provide equal opportunities for everyone, regardless of , , reassignment, marriage and civil partnership, and maternity, , or belief, or , or any other non-performance factor.

Please note, no agencies will be accepted in the recruitment of this role.