Zero Trust Security Engineer, Enterprise & Automation

Turo Inc.; San Francisco (CA); Hybrid; USD 124,000 - 155,000; Full time

Benefits offered by this job

Equity

Medical, dental, vision insurance

Retirement employer match

Learning & Development stipend

Turo host matching program

Travel credit

Phone and internet stipend

Paid time off

Job summary

Turo Inc. is seeking a Security Engineer to advance enterprise security across the organization. The role emphasizes building and maintaining Zero Trust principles with strong automation via Terraform and IaC.

You will defend email security, DLP, and endpoints while participating in incident response and on-call rotations, reporting to the Senior Engineer and Manager. The candidate should have 3+ years in enterprise security, knowledge of identity governance, and scripting abilities in Python or

Qualifications

• 3+ years of enterprise security experience, focusing on core administration of email security, DLP, or endpoint detection tools.
• Solid knowledge of identity governance, SaaS security baselines, and standard compliance frameworks (SOX/SOC 2).
• Proficiency in scripting basic security automations using Python or PowerShell.
• Familiarity with containerized environments, GitOps workflows, and AWS security suites.
• Industry certifications like Security+, GSEC, or CEH are a plus.

Responsibilities

• Support the implementation of Zero Trust security frameworks across the enterprise, focusing on daily enforcement of least privilege models.
• Administer and maintain Advanced Email Security solutions to protect against phishing, spoofing, and email threats.
• Deploy, operate, and triage alerts for Data Loss Prevention (DLP) and Insider Threat prevention technologies.
• Manage and optimize Endpoint Security configurations (e.g., CrowdStrike, Kandji) to safeguard corporate devices.
• Collaborate with Identity Governance teams to administer and enforce secure user access control policies (e.g., Okta lifecycle workflows).
• Support evidence gathering and control verification to ensure ongoing compliance with SOX and SOC 2 standards.
• Deliver and manage regular Security Awareness Training programs and corporate phishing simulations.
• Utilize Infrastructure as Code (specifically Terraform templates) to maintain automated security configurations.
• Actively participate in the Incident Response on-call rotation, triaging security alerts, executing defined automation playbooks, and mitigating security incidents swiftly.
• Evaluate and maintain the baseline security posture of integrated third-party SaaS applications.]
• CoT_job_summary_short
• job_summary_short
• contract_type
• location_type
• remote_scope
• perks
• stated_min
• stated_max
• stated_absolute
• salary_estimation_cot
• estimated_low
• estimated_medium
• estimated_high
• currency
• frequency
• bonus
• tax
• application_email
• job_end_date
• contact_person
• hiring_department_name

Skills

Email security

DLP

Endpoint security

Identity governance

Scripting (Python/PowerShell)

GitOps workflows

AWS security

Containerized environments

Education

Security+ / GSEC / CEH certifications

Tools

CrowdStrike

Kandji

Okta

Terraform

Job description

Turo Inc. is seeking a Security Engineer to advance enterprise security across the organization. The role emphasizes building and maintaining Zero Trust principles with strong automation via Terraform and IaC.

You will defend email security, DLP, and endpoints while participating in incident response and on-call rotations, reporting to the Senior Engineer and Manager. The candidate should have 3+ years in enterprise security, knowledge of identity governance, and scripting abilities in Python or