IT Security Engineer
Alpaca · Engineering · Mid · 10d ago
Open to candidates across Americas.
Direct from the employer's own careers page
Who can apply
Read straight from the listing, so you know before you spend time on it.
Open to candidates across Americas.
“Remote - Americas”
A team of 400+ distributed across the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond.
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- Provides a one-time $500 home-office setup stipend and a $150 monthly stipend via Brex.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As an IT Security Engineer reporting to the Enterprise Security Architect, you will own the security standards and controls protecting Alpaca’s workforce identities, endpoints, and SaaS systems. Working in a fully distributed security team, you will collaborate with IT, DevOps, Engineering, and GRC to enforce single sign-on, privileged access, device posture, and incident response measures.
What you'll do
- Define and maintain security standards for SSO, conditional access, and phishing-resistant MFA across cloud and internal systems.
- Maintain privileged access standards, approval policies, and periodic access reviews with system owners.
- Own endpoint detection and response (EDR) policy tuning, device-posture baselines, and secure network access requirements.
- Lead identity, endpoint, and email aspects of incident response and participate in on-call rotations.
- Maintain email authentication standards (SPF, DKIM, DMARC), monitor lookalike domains, and triage phishing reports.
What you bring
- 3+ years of experience in IT security, identity security, or security engineering roles.
- Hands-on experience with an identity provider, SSO (SAML and OIDC), and phishing-resistant MFA (FIDO2 or hardware keys).
- Hands-on experience with an endpoint detection and response (EDR) platform and alert investigation.
- Demonstrated scripting or automation skills in Python, Bash, or PowerShell.
- Working knowledge of zero-trust network access, device posture controls, and email security protocols (SPF, DKIM, DMARC).
About Alpaca
Alpaca is a global leader in agent-first brokerage infrastructure, offering institutional-grade APIs for stocks, ETFs, crypto, and trading to millions of accounts across 40 countries.
View Alpaca profile & open roles →