Security Engineer

Who you are

• Bachelor's degree in Computer Science, Information Security, or a related field or equivalent experience. Advanced degrees or certifications (e.g., CISSP, GIAC, Security+, CISM) are advantageous
• A minimum of 2 years of experience in information security, with meaningful experience across corporate/IT security domains (identity, endpoint, network, GRC)
• Deep understanding of enterprise identity providers and SSO/MFA platforms, endpoint/EDR tooling, MDM platforms, and email security tooling
• Working knowledge of common compliance frameworks (e.g., SOC 2, ISO 27001)
• Familiarity with government/public-sector security frameworks (FedRAMP, FISMA, NIST SP 800 series, CJIS) is a plus, given Cape's government-facing customer base
• Working knowledge of consumer privacy regulations (GDPR, CCPA, and other regional privacy laws) as they apply to handling customer data
• Exposure to secure software development lifecycle (SSDLC) practices and partnering with engineering on secure design reviews
• Proficiency in scripting or automation (Python, shell scripting, or similar) to streamline security operations and reporting
• Familiarity with vendor/third-party risk management processes and tooling
• Solid knowledge of network security, encryption technologies, and secure business-system configuration
• Excellent analytical skills for identifying and mitigating complex security vulnerabilities and risks
• Strong communication and leadership abilities, capable of working collaboratively across teams and effectively conveying technical information to non-technical stakeholders
• Organized and able to manage multiple priorities in a dynamic, fast-paced environment
• Security Expertise – Experience identifying and resolving security issues across corporate systems (identity, endpoint, network, and data). Secure-by-design principles, and partnering with IT/engineering during design time
• Analytical – Collects data and information; uses critical thinking to solve problems and make sound decisions
• Collaboration & Teamwork – Builds partnerships with others to reach common goals. Able to share credit with coworkers, display enthusiasm and promote a friendly group-working environment. Works closely with other departments as necessary, supports group decisions and solicits opinions from coworkers
• Communication – Presents information through verbal and written communication; reads and interprets complex information; listens well. Develops and delivers multi-mode communications that convey clear understanding of unique audiences
• Decision-Making – Acts quickly to solve problems and exercises good judgment by making sound and well-informed decisions. Perceives the impact and implications of decisions; makes effective and timely decisions, even when data is limited
• Dependability/Self-Management – Possesses the personal discipline and diligence necessary to keep commitments and to complete tasks. Is accountable for actions and outcomes. Makes effort to improve situations without explicit instructions; a self-starter who consciously manages his/her own time and resources
• Customer Centric – Values the importance of delivering high quality, innovative service to employees; understands the needs of the client; responds promptly and is accessible to them; follows through on commitments in a timely manner; maintains positive, long-term working relationships; assumes ownership of process issues and takes appropriate steps to mitigate problems. Gets consistently high feedback from stakeholders. Raises hand to help
• Flexibility / Adaptability – Adjusts quickly to changing priorities, conditions, and challenges. Copes effectively with complexity and change. Is comfortable navigating ambiguity. Can handle business changes with ease and without frustration or a feeling of defeat. Feels comfortable dealing with limited unknowns in an area they are well versed in
• Planning & Organization – Manages multiple projects, determines project urgency in a meaningful and practical way, uses goals to guide actions, creates detailed action plans, and organizes tasks
• Do Excellent Work
• Respect The Opportunity (each other, the user)
• Overshare
• Bias Towards Action

What the job involves

• We are seeking an experienced Security Engineer with expertise in corporate security to join our team
• As a strategic partner, you will make an immediate impact by leveraging your expertise across identity, endpoint, network, and information security alongside IT, engineering, and business teams
• This role is pivotal in reducing risk across our corporate environment, covering employee-facing systems, internal infrastructure, and third-party risk, and will be responsible for designing, implementing, and maintaining security measures that comply with regulatory standards, enhance internal processes, and minimize data security risks
• Through developing ongoing security strategies, technologies, and a strong security culture, you will support the organization's business objectives and daily operations
• Design, implement, and manage security controls and policies across corporate IT systems, focusing on the confidentiality, integrity, and availability of employee, customer, and business data
• Own and mature identity and access management (IAM/SSO/MFA), endpoint security (EDR, MDM), and email/network security (phishing defense, DLP, firewalls, VPN) across the organization
• Perform comprehensive security assessments of corporate systems and vendors to identify vulnerabilities, assess risk, and recommend actionable mitigation strategies
• Establish governance, guardrails, and monitoring for emerging employee tooling, including the associated data-handling, access, and third-party risks
• Own the vulnerability management lifecycle across the corporate fleet: scanning, risk-based prioritization, remediation and patch SLAs, and closure tracking across endpoints and internal systems
• Lead security awareness and phishing simulation programs to build an organization-wide culture of security
• Contribute to compliance and audit efforts as needed, lending security context where it helps the business move faster
• Assess and manage third-party/vendor security risk, including security questionnaires, contract reviews, and ongoing vendor monitoring
• Assist in running and addressing findings from penetration tests, red team exercises, and internal audits, ensuring prompt and effective remediation
• Stay informed about the latest security threats, vulnerabilities, and compliance mandates affecting corporate environments; provide strategic guidance on technologies and best practices
• Investigate security incidents and insider-threat concerns in partnership with HR, Legal, and IT as needed
• Raise the security bar across the company by mentoring engineers and partners on secure practices, fostering a culture of security awareness and continuous improvement
• Collaborate with stakeholders to integrate security requirements effectively into IT projects and broader business initiatives

The application process

• Click the link below to apply

Benefits

• Medical insurance
• Vision insurance
• Dental insurance
• 401(k)
• Paid maternity leave
• Paid paternity leave
• Commuter benefits
• Disability insurance