Who we are: Through a partnership-based approach, Coterie helps insurance professionals unlock untapped revenue in the small commercial space. Backed by a16z.
About the role
Coterie’s Security team is hiring a Security Engineer (100% Remote!) to contribute to our identity, access, and security operations programs. Under the guidance of our Principal Security Architect, this role runs our recurring access reviews, supports evidence collection for compliance testing, and brings hands-on privileged access management experience, with an emphasis on endpoint privilege management.
What they're looking for
- 3–5 years of experience in security operations, identity/access administration, or a related technical role
- Experience with cloud-native enterprise services
- Solid understanding of identity and access management concepts, including authentication, authorization, least privilege, and role-based access control
- Hands-on experience with privileged access management, with specific experience in endpoint privilege management (managing local administrator rights and elevation)
- Experience running or supporting access reviews and access certifications, and removing unneeded access
- Familiarity with compliance frameworks (e.g., SOC 1, SOC 2, SOX) and supporting the collection of audit evidence
More about this role
What will the Security Engineer do?
Coterie’s Security team is hiring a Security Engineer (100% Remote!) to contribute to our identity, access, and security operations programs. Under the guidance of our Principal Security Architect, this role runs our recurring access reviews, supports evidence collection for compliance testing, and brings hands-on privileged access management experience, with an emphasis on endpoint privilege management. You’ll also help respond to security operations alerts and run our security awareness phishing simulation program. If you enjoy wearing different “hats” and want to grow in a fast-paced, cloud-native environment, then this role is for you!
- Run Coterie’s recurring user access reviews under the direction of the Principal Security Architect, coordinating with system owners to certify access and remove stale or over-provisioned entitlements across our environments
- Gather, organize, and validate evidence to support compliance testing and audits, following established procedures to build evidence packets that trace access and changes from request through approval
- Administer our privileged access management program with oversight, focusing on...
Browse similar: Startup jobs · Remote jobs