Enterprise Security Engineer

Experience with every technology or framework is not required. Relevant technologies include:

Identity management (e.g., Okta, Onelogin, Active Directory)

MDM systems (e.g., Jamf, Intune, NinjaOne)

EDR/MDR tools (e.g., CrowdStrike, TrendMicro, SentinelOne)

AI management (e.g., Claude, ChatGPT, Cursor, Grok)

Government security frameworks (FedRAMP, CMMC, NIST 800-171, NIST 800-53, CUI handling)

Commercial security frameworks (SOC2 Type II, ISO 27001, ISO 42001)

3+ years of experience in Enterprise Security Engineering, Security Engineering, IT Security, or a related hands-on security engineering role.

Hands-on experience administering endpoint management and endpoint detection and response (EDR) solutions in production environments.

Experience administering or securing identity and access management (IAM) platforms, including SSO, MFA, or lifecycle management

Experience evaluating, governing, or administering SaaS applications, OAuth integrations, and enterprise security controls.

Experience working with regulated, customer-protected, or other sensitive data (e.g., CUI, HIPAA, PCI, SOC 2).

Strong systems configuration, troubleshooting, workflow design, and operational ownership skills.

Demonstrated ability to balance security and compliance requirements with business needs and user experience.

Excellent written and verbal communication skills, with the ability to partner effectively across Security, IT, Engineering, Compliance, Legal, and other cross-functional teams.

Experience governing AI tools or other rapidly adopted workplace technology.

Experience in government, defense, critical infrastructure, or another highly regulated industry, including familiarity with CUI, CMMC, FedRAMP, NIST, SOC 2, or ISO 27001.

Experience administering CrowdStrike Falcon, Microsoft Defender, SentinelOne, or another enterprise EDR platform.

Experience administering Okta, Microsoft Intune, Jamf, or comparable identity and endpoint management platforms.

Experience with DLP, CASB, browser security, or SaaS/OAuth governance technologies.

Experience automating security or IT workflows using Python, PowerShell, Bash, or similar scripting languages.

Experience working on a small, high-growth, or startup team where security processes, tooling, and ownership were built from the ground up.

At Gecko, our people are our greatest investment. In addition to competitive compensation packages, we offer company equity, 401(k) matching, gender-neutral parental leave, full medical, dental, and vision insurance, mental health, ongoing professional development, family planning assistance, and flexible paid time off.

Gecko values collaboration, innovation, and partnership, and we believe we do our best work when we're together in person. We’re an office-first culture but understand that sometimes you may need to work from home. Many people are in the office five days a week, others need a bit more flexibility. Ultimately, we care about the outcomes we achieve - and creating a culture of autonomy and trust that enables that impact.

Gecko is committed to creating a culture of inclusion and belonging, and we are proud to be an equal opportunity employer. We believe it is our collective responsibility to uphold these values and encourage candidates from all backgrounds to join us in our mission to protect today’s infrastructure and give form to tomorrow’s. All qualified applicants will be treated with respect and receive equal consideration for employment without regard to race, color, creed, religion, sex, gender identity, sexual orientation, national origin, disability, uniform service, veteran status, age, or any other protected characteristic per federal, state, or local law. If you are passionate about what you do and want to use your talents to support our critical mission, we’d love to hear from you.