[Hiring] Security Engineer @Squads

Role Description

You’ll own identity and endpoint security across Squads, working closely with our Head of Security. That means making sure the right people have the right access, company devices meet a consistent security baseline, and new tools can be adopted with a clear understanding of their risks.

This is a hands-on role. You’ll run the day-to-day systems, respond when something looks wrong, and build the access reviews, standards, and processes we’ll need as the company grows. We’re looking for someone who thinks like an attacker, makes sound calls under pressure, and can help the team move quickly while keeping the bar high.

What You’ll Own

• Identity & Access
  • Administer our identity provider and SSO, enforce MFA and phishing-resistant authentication, and improve how access is granted and removed.
  • Build periodic access reviews and apply least privilege across critical systems.
  • Manage access provisioning and offboarding for employees and contractors.
• Endpoints & IT Operations
  • Own MDM and EDR coverage across the device fleet, with clear configuration standards and security baselines.
  • Handle device provisioning, access requests, and the IT work that keeps the team operating securely.
  • Automate repetitive security and IT workflows where it improves coverage or reduces manual work.
• Risk & Response
  • Partner with the Head of Security on vendor risk assessments.
  • Assess new SaaS tools and AI integrations before adoption, and give teams practical guidance on how to use them safely.
  • Act as a first responder for identity and endpoint incidents: investigate, contain, document, and escalate when needed.
  • Help define and maintain security policies as the program matures.

Qualifications

• You’ve owned identity and endpoint systems in practice, including the messy work of getting coverage and adoption across a team.
• You spot how an attacker could use a weak access path, unmanaged device, or new integration before it becomes an incident.
• You can distinguish a real risk from a theoretical one and explain your recommendation clearly.
• You’ve responded to incidents and can stay calm, gather facts, and make the next call under pressure.
• You write guidance that non-technical teammates can follow.
• You’ve helped build a security function early, when the process and tooling still needed to be defined.
• You’re comfortable handling an access request or laptop issue one hour and improving a company-wide control the next.

Requirements

• Hands-on experience operating an enterprise identity platform, including SSO, MFA, and access policies.
• Experience managing MDM and EDR tooling across a device fleet.
• Experience responding to security incidents, compromises, or suspected breaches.
• Ability to assess vendor and integration risk, including risks introduced by AI tools.
• Scripting ability in Python or Bash for automation and basic tooling.
• Strong written communication and the judgment to work independently.
• Experience with blockchain or Web3 threats, cloud security, SIEM and detection engineering, or AI agents used in security operations is a plus.

Benefits

• Ownership over the systems people use every day.
• Direct hand in how the company adopts new tools.
• Chance to build controls that scale with the business.
• Work closely with the Head of Security in a small team where good judgment has an immediate effect.
• Opportunity to build the security program while also operating it.