Security & Trust Engineer

This is a Fully Remote Job
1. About Our Client:
The organization operates in the industrial condition monitoring sector, supporting global manufacturers and industrial operators in predicting equipment failures before they occur. It maintains a remote-first approach and utilizes a modern, cloud-first Microsoft environment. The company's IT & Security team is responsible for safeguarding company and customer data, upholding SOC 2 compliance, and ensuring customer trust in data security.
2. About the Opportunity:
The Security & Trust Engineer role is focused on managing the day-to-day operations of the organization's security program. This position acts as a primary technical contact for customer security discussions, leads responses to customer security questionnaires and due diligence requests, and advances the SOC 2 Type 2 compliance program. The role also includes broader security engineering responsibilities across endpoint protection, identity management, vulnerability management, and vendor risk.
3. Responsibilities:
Serve as the security expert on customer and prospect calls to establish trust in the organization's security posture.
Manage responses to customer security questionnaires and RFP security sections.
Maintain a library of pre-approved answers, evidence, and architecture diagrams to expedite questionnaire responses.
Support security-related contract reviews and due diligence in collaboration with Legal, Sales, and Customer Success teams.
Respond to customer security requests within two business days and coordinate escalations as needed.
Ensure compliance with customer contractual security obligations.
Act as control owner in Trust Center Vanta, maintaining evidence and remediating failing controls.
Support the SOC 2 Type 2 audit process and expand the compliance program.
Maintain and update security policies and control documentation.
Conduct vendor security reviews and participate in organizational risk assessments.
Administer and tune endpoint detection and response tools.
Manage identity and access security including Conditional Access and MFA.
Collaborate with IT on security baselines and compliance policies.
Oversee vulnerability management processes.
Support security incident response and threat monitoring.
Administer security awareness training programs.
Partner with IT leadership on initiatives and tooling.
Document security processes and maintain records in Notion and Jira.
Communicate security concepts effectively to technical and non-technical stakeholders.
4. Requirements:
Minimum 3 years of experience in security engineering, security analysis, GRC, or IT security.
Experience responding to customer security questionnaires and participating in security calls.
Hands-on experience with SOC 2 compliance and familiarity with GRC tools such as Vanta.
Knowledge of endpoint protection/EDR tools like CrowdStrike.
Familiarity with identity and access management in Microsoft/Entra ID environments.
Ability to work independently in a remote, fast-paced environment.
Strong communication skills for diverse audiences.
5. Pay Range and Compensation Package:
The pay range and compensation package for this role will be determined based on the candidate’s experience, skills, and other relevant factors.
Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.

Work arrangement
Yes