Security Operations Engineer

Alloy is where you belong! 

Alloy solves the identity risk problem for companies that offer financial products by enabling them to outpace fraud and confidently serve more people around the world. Banks and Fintechs turn to Alloy to take control of fraud, credit, and compliance risk, and grow with the clearest picture of their customers.  

Through our values: Be Bold, Get Scrappy, Collaborate, and Celebrate Our Differences, we are creating a workplace where you can grow, thrive, and belong. See how we’ve been continuously recognized and named one of Inc.Magazine’s Best Workplaces, Forbes America’s Best Startup Employers, Best Fintech to Work for by American Banker, year after year.  

Check out our investors and read more about us here.  

About the team

This role is a part of the Security and Access Management (SAM) team at Alloy, which is a dynamic team responsible for maintaining, supporting, and continuously improving the overall security posture of the company by implementing robust security & data governance protocols and ensuring that appropriate users are granted the appropriate level of access to both tools and data.

What you'll be doing

As a Security Operations Engineer, security is at the forefront at all levels, from managing the security of endpoints (EDR) to protecting the company’s data (DLP) to ensuring secure e-communication, in particular via email. An ideal candidate will have a strong background in security operations, incident response, and a drive for staying ahead of emerging threats.

Responsibilities include:

• Endpoint Security & Mobile Device Management: 
• Incident Response - Develop and execute incident response plans to effectively mitigate security incidents, minimize impact, and ensure timely resolution
• Threat Detection and Mitigation - Detect, analyze, and mitigate security threats and vulnerabilities across the organization's systems and networks
• Integrate security tools with SIEM to centralize monitoring by collaborating with other Infrastructure & Security teams 
• Data Loss Prevention: 
• Information Protection & Governance - Maintain appropriate controls around sensitive data for the determined lifecycle within the organization
• Security Policy and Compliance - Ensure compliance with industry regulations and internal security policies by conducting regular audits, assessments, and implementing necessary controls
• Email Security: 
• Manage and enhance email security measures to mitigate risk and protect sensitive information
• Monitor email traffic for suspicious activities, phishing attempts, and malware-infected attachments
• SaaS Tools & Access Management: 
• Implement SSO or other forms of managed authentication over the use of username and passwords
• Automate provisioning and deprovisioning of access via role or attribute based access control
• End-user support & on-call rotation 

Who we’re looking for

Qualifications:

• Bachelor's degree in Information Security, Computer Science, or related field
• 3+ years of experience working in a fast-paced, technically driven security team 
• Ability to work cross-functionally, individually, and to lead work among a team
• Proficiency in deploying and managing EDR / other security solutions, such as Crowdstrike, Sophos, Defender, etc.
• Proficiency in working with both Mac and Windows machines, preferably with experience using Jamf and Microsoft Endpoint Manager / Intune
• Familiarity with IDPs, such as Okta, OneLogin, etc.
• Certifications such as CompTIA Network+, Security+ a plus
• Experience with audits such as SOC II, ISO 27001 a plus
• Familiarity with security frameworks such as NIST a plus

At Alloy, we strive to attract & retain talent by providing compensation that is competitive with other organizations of our size & stage. We are committed to ensuring each candidate has what they need to be successful in their role with a balanced range of compensation, equity, perks & benefits. We actively share our compensation philosophy with employees, with the goal of fostering open and honest dialogue. Finally, we work to administer our philosophy and drive consistency in order to promote equity and monitor the fairness of each outcome.

The following range is based on the scoped level within the organization and only for NYC: 100K - 120K

Benefits and Perks 

• Unlimited PTO and flexible work policy
• Medical, dental, vision plans with HSA (monthly employer contribution) and FSA options
• 401k with 100% match up to 4% of annual employee compensation 
• Eligible new parents receive 16 weeks of paid parental leave 
• Home office stipend for new employees
• Learning & Development annual stipend
• Well-being benefits include access to OneMedical, Headspace, and more

We're a lean team, so your impact will be felt immediately. If this all sounds like a good fit for you, why not join us?

How to Apply

Apply right here. You've found the application!

Alloy is proud to be an equal opportunity workplace and employer. We’re committed to equal opportunity regardless of race, color, ancestry, religion, gender, gender identity, parental or pregnancy status, national origin, sexual orientation, age, citizenship, marital status, disability, or veteran status. We are committed to an inclusive interview experience and provide reasonable accommodations to applicants with visible and invisible disabilities. We encourage applicants to share needed accommodations with their recruiter.