Security Engineer, Enterprise Security

Turo is searching for a highly motivated and versatile Security Engineer to support and execute our efforts in securing enterprise systems and data through the daily operation, administration, and implementation of our security framework. This role will focus heavily on building out and maintaining Zero Trust principles across the organization under the strategic direction of the Senior Engineer and Manager.

The successful candidate will have strong execution capabilities across enterprise domains, have a proactive technical mindset, and be eager to build automated security solutions from the ground up.

• Support the implementation of Zero Trust security frameworks across the enterprise, focusing on daily enforcement of least privilege models.

• Administer and maintain Advanced Email Security solutions to protect against phishing, spoofing, and email threats.

• Deploy, operate, and triage alerts for Data Loss Prevention (DLP) and Insider Threat prevention technologies.

• Manage and optimize Endpoint Security configurations (e.g., CrowdStrike, Kandji) to safeguard corporate devices.

• Collaborate with Identity Governance teams to administer and enforce secure user access control policies (e.g., Okta lifecycle workflows).

• Support evidence gathering and control verification to ensure ongoing compliance with SOX and SOC 2 standards.

• Deliver and manage regular Security Awareness Training programs and corporate phishing simulations.

• Utilize Infrastructure as Code (specifically Terraform templates) to maintain automated security configurations.

• Actively participate in the Incident Response on-call rotation, triaging security alerts, executing defined automation playbooks, and mitigating security incidents swiftly.

• Evaluate and maintain the baseline security posture of integrated third-party SaaS applications

• 3+ years of experience in enterprise security, focusing on core administration of email security, DLP, or endpoint detection tools.

• Solid knowledge of identity governance, SaaS security baselines, and standard compliance frameworks (SOX/SOC 2).

• Proficiency in scripting basic security automations using Python or PowerShell.

• Familiarity or baseline experience working with containerized environments, GitOps workflows, and AWS security suites.

• Industry certifications like Security+, GSEC, or CEH are a plus.

For this role, the target base salary range in San Francisco is $124,000-$155,000 annually. This role is also eligible for equity and benefits. In general, our ranges reflect the market-based target for new hire salaries based on the level and location of the role.

Within the range, individual pay is determined by objective factors assessed during the application and interview process, such as job-related skills, experience, and relevant education or training. We encourage you to talk with your recruiter to learn more about the total compensation and benefits available for this role.

Turo highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Turists will be expected to work in the office 3 days per week on Mondays, Wednesdays, and Thursdays. Turo considers working in the office at least 3 days per week to be an essential function of this hybrid role.

Your recruiter can share more information about the various in-office perks Turo offers.