Security & Trust Engineer

About Our Client

The organization operates in the industrial condition monitoring sector, supporting global manufacturers and industrial operators in predicting equipment failures before they occur. It maintains a remote-first approach and utilizes a modern, cloud-first Microsoft environment. The company's IT & Security team is responsible for safeguarding company and customer data, upholding SOC 2 compliance, and ensuring customer trust in data security.

About the Opportunity

The Security & Trust Engineer role is focused on managing the day-to-day operations of the organization's security program. This position acts as a primary technical contact for customer security discussions, leads responses to customer security questionnaires and due diligence requests, and advances the SOC 2 Type 2 compliance program. The role also includes broader security engineering responsibilities across endpoint protection, identity management, vulnerability management, and vendor risk.

Responsibilities

• Serve as the security expert on customer and prospect calls to establish trust in the organization's security posture.
• Manage responses to customer security questionnaires and RFP security sections.
• Maintain a library of pre-approved answers, evidence, and architecture diagrams to expedite questionnaire responses.
• Support security-related contract reviews and due diligence in collaboration with Legal, Sales, and Customer Success teams.
• Respond to customer security requests within two business days and coordinate escalations as needed.
• Ensure compliance with customer contractual security obligations.
• Act as control owner in Trust Center Vanta, maintaining evidence and remediating failing controls.
• Support the SOC 2 Type 2 audit process and expand the compliance program.
• Maintain and update security policies and control documentation.
• Conduct vendor security reviews and participate in organizational risk assessments.
• Administer and tune endpoint detection and response tools.
• Manage identity and access security including Conditional Access and MFA.
• Collaborate with IT on security baselines and compliance policies.
• Oversee vulnerability management processes.
• Support security incident response and threat monitoring.
• Administer security awareness training programs.
• Partner with IT leadership on initiatives and tooling.
• Document security processes and maintain records in Notion and Jira.
• Communicate security concepts effectively to technical and non-technical stakeholders.

Requirements

• Minimum 3 years of experience in security engineering, security analysis, GRC, or IT security.
• Experience responding to customer security questionnaires and participating in security calls.
• Hands-on experience with SOC 2 compliance and familiarity with GRC tools such as Vanta.
• Knowledge of endpoint protection/EDR tools like CrowdStrike.
• Familiarity with identity and access management in Microsoft/Entra ID environments.
• Ability to work independently in a remote, fast-paced environment.
• Strong communication skills for diverse audiences.