Sr. Security Engineer

About the role

Octus

Octus is a leading global provider of credit intelligence, data, and analytics. Since 2013, tens of thousands of professionals across hedge fund, investment banking, management consulting, and law firm verticals have come to rely on Octus to make better, faster, and more confident decisions in pace with the fast-moving credit markets. For more information, visit: https://octus.com/

Working at Octus

Octus hires growth-minded innovators and trailblazers across the globe to drive our business and culture. Our core values – Action Oriented, Customer First Mindset, Effective Team Players, and Driven to Excel – define an organizational ethos that’s as high-performing as it is human. Among other perks, Octus employees enjoy competitive health benefits, matched 401k and pension plans, PTO, generous parental leave, gym subsidies, educational reimbursements for career development, recognition programs, and much more.

Role

We're hiring a hands-on Senior Cybersecurity Engineer to own the security technology that protects Octus employees, endpoints, and enterprise systems. You'll keep our security stack healthy and well tuned, and you'll harden the security settings in the business systems people use every day.

Our security team is small, so this role is broad. Your main focus is IT and enterprise security. You'll also work on cloud security, application security, incident response, vendor risk, and audits. Anyone who joins gets real exposure across the whole program.

You'll also help us secure AI tools. Octus uses AI heavily, and we want someone who can make tools like Claude, Gemini, and ChatGPT safe to use at scale.

Responsibilities

Primary focus: IT and enterprise security

- Own the care and feeding of our security tools. Tune policies, manage upgrades, fix integrations, and retire what we no longer need.

- Manage endpoint security across Mac and Windows with Microsoft Defender, Intune, and Jamf Pro.

- Manage Netskope policies for web, SaaS, and data loss prevention.

- Harden identity in Okta and Microsoft Entra ID. This covers SSO, MFA, conditional access, privileged access, and admin access reviews.

- Set and enforce security configuration in enterprise systems like Google Workspace, Slack, Atlassian, and other SaaS apps.

- Manage email security with Abnormal Security and Google Workspace controls.

- Support secrets and credential management in 1Password.

- Harden AI tools like Claude, Gemini, and ChatGPT. Configure admin settings, connector and MCP controls, audit logging, and data protections.

Also in scope: the broader program

- Build and tune detections in Google SecOps with our managed SOC partner.

- Respond to incidents and lead post-incident reviews. Join the team on-call rotation. Calls are rare.

- Track and drive remediation of cloud and code findings from Wiz and Snyk.