IT Security Engineer
Alpaca · Remote - Americas
About this role
**IT Security Engineer** **Who We Are** Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. We serve hundreds of financial institutions across 40 countries with institutional-grade APIs—supporting broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges (10M+ brokerage accounts). **Your Role** Own security standards and controls that protect Alpaca’s workforce identities, endpoints, and critical business systems. You’ll maintain these standards, measure control effectiveness, and partner with IT (device operations and day-to-day administration). This role reports to the Enterprise Security Architect and works closely with IT, DevOps, Engineering, GRC, and the wider Security team. The Security Team is fully distributed and remote. **Things You Get To Do** **Identity and Access Security** - Define and maintain security standards for SSO and conditional access across cloud, SaaS, and internal systems - Own multi-factor authentication standards, including phishing-resistant methods, and keep them enforced - Maintain privileged-access standards, approval policies, and periodic access reviews - Partner with IT and People teams so joiner/mover/leaver access changes are timely, complete, and auditable **Endpoint, Email, and Domain Security** - Own endpoint detection and response (EDR) policy and tuning (with IT handling deployment) - Maintain device posture and secure network access requirements for business applications - Measure identity and endpoint controls and follow up where requirements aren’t met - Partner with Security Operations on identity, endpoint, and email detections and response playbooks - Maintain security baselines for administrator access to critical SaaS platforms and vendor accounts - Assess identity/account impact when a SaaS provider or vendor reports a security event - Own email authentication standards and email security configuration - Maintain domain security standards, including monitoring lookalike domains - Triage reported phishing and coordinate takedowns **Incident Response and Collaboration** - Lead identity, endpoint, and email aspects of security incidents (including account containment) - Participate in the Security Operations on-call rotation after onboarding and cross-training - Provide clear guidance to IT and employees on security requirements so controls are adopted without slowing the business **Who You Are (Must-Haves)** - Excited about Alpaca’s mission - 3+ years of experience in IT security, identity security, or security engineering - Hands-on experience with an identity provider and SSO (SAML and OIDC) - Experience enforcing phishing-resistant MFA (e.g., FIDO2 / hardware security keys) - Hands-on experience with an endpoint detection and response platform - Scripting/automation experience (Python, Bash, or PowerShell) - Experience with zero-trust network access or device posture controls - Working knowledge of email authentication (SPF, DKIM, DMARC) and phishing response - Experience translating security requirements into operational workflows with IT - Experience investigating identity, endpoint, or email security alerts - Willingness to participate in an on-call rotation - Strong written and verbal communication skills, especially during incidents - Comfortable working cross-functionally and handling escalations calmly and decisively **Who You Might Be (
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.