企业安全工程师
Enterprise Security Engineer
职位描述
Hi, I'm Alexa https://www.linkedin.com/in/alexayiouroukis/, Jane 的高级云安全工程师。我正在从零开始构建我们的平台安全功能，这是首批将塑造该功能的角色之一。你将与我们的资深企业安全工程师密切合作，处理日常加固工作，并与我一起规划该功能的下一步发展。我寻找那些将安全视为合作伙伴而非障碍的人，以及希望拥有真正责任并成长的人。这个角色提供两者。
加入 Jane 作为我们的新企业安全工程师，你将帮助加固保护 Jane 和客户信任我们处理的敏感健康信息的系统、终端和身份。你将负责终端安全、事件响应、身份和访问控制以及数据保护方面的实际工作。如果你热衷于减少现实世界的攻击面，能够独立完成范围明确的工作，并对使用人工智能和自动化来扩大你的影响感到兴奋，我们很期待收到你的简历。
作为 Jane 企业加固路线图上的关键执行者，你将在范围明确的项目上独立工作，同时与 IT、基础设施工程和其他安全工程团队紧密合作。企业加固的大部分工作依赖于其他团队，因此你会让安全感觉像是一种合作而不是障碍：带动他人，建设性地传达发现，并知道何时需要自己做出决定，何时需要请更高级的工程师介入。
人工智能是这个团队运作的核心，而不是一个炒作概念。我们依靠人工智能和自动化来减少重复劳动，提高调查精度，加快速度，你将被鼓励进行实验，构建自己的工作流程，并分享哪些有效哪些无效，以提升整个团队的能力。
我们期望你带来的影响
- 负责 Jane 的终端加固基线，包括 CIS 基准的采用、CrowdStrike Falcon 中的 EDR 覆盖和调优，以及工作站和移动设备的漏洞管理，协调 IT 在 SLA 时间内关闭发现的问题。
- 调查、遏制并记录安全事件，承担大约每年 5 到 6 周的值班轮班，适时向正确的人汇报，并根据真实经验保持运行手册的准确性。
- 通过协助推出抗网络钓鱼的多因素认证（FIDO2）、Okta 设备信任和条件访问，以及 BYOD 计划，加强身份和访问控制，与 IT 合作确保最小权限原则。
查看英文原文
ABOUT THE ROLE
Hi, I'm Alexa https://www.linkedin.com/in/alexayiouroukis/, Senior Cloud Security Engineer at Jane. I'm building our Platform Security function from the ground up, and this is one of the first roles that will shape it. You'll work closely with our Staff Enterprise Security Engineer on the day to day hardening work, and with me on where the function is headed next. I look for people who treat security as a partnership, not a gate, and who want real ownership, and the room to grow into it. This role offers both.
Join Jane as our new Enterprise Security Engineer, where you'll help harden the systems, endpoints, and identities that protect Jane and the sensitive health information our customers trust us with. You'll take on hands-on work across endpoint security, incident response, identity and access, and data protection. If you're energized by reducing real-world attack surface, comfortable owning well-scoped work end to end, and excited about using AI and automation to amplify your impact, we'd love to hear from you.
As a key executor on Jane's enterprise hardening roadmap, you'll work independently on well-scoped initiatives while partnering closely with IT, Infrastructure Engineering, and the rest of Security Engineering. Much of enterprise hardening depends on other teams, so you'll make security feel like partnership rather than an obstacle: bringing people along, delivering findings constructively, and knowing when a call is yours to make versus when to pull in a more senior engineer.
AI is core to how this team works, not a buzzword. We lean on AI and automation to cut toil, sharpen investigations, and move faster, and you'll be encouraged to experiment, build your own workflows, and share what works and what doesn't so the whole team levels up.
WHAT IMPACT WE'RE LOOKING FOR YOU TO MAKE
- Own Jane's endpoint hardening baseline, including CIS benchmark adoption, EDR coverage and tuning in CrowdStrike Falcon, and workstation and mobile vulnerability management, coordinating with IT to close findings within SLA.
- Investigate, contain, and document security incidents and carry a share of the on-call rotation (roughly 5 to 6 weeks a year), escalating at the right time to the right people and keeping runbooks accurate based on real experience.
- Strengthen identity and access by helping roll out phishing-resistant MFA (FIDO2), Okta device trust and conditional access, and a BYOD program, partnering with IT to keep least-privilege posture healthy across systems.
- Help stand up data-protection controls (SASE, CASB, DLP, egress filtering, and PHI handling) along with the guardrails that govern internal AI usage across tools, agents, MCP servers, and their access controls.
- Tune detections and signal-to-noise in our SIEM (Datadog) and build AI-assisted automation that reduces toil, sharing wins and failures openly so the whole team gets better.
WHAT EXPERIENCE WE THINK WE NEED
- 2 to 4 years in enterprise or infrastructure security, security operations, or incident response, with a track record of taking ownership and growing your skills.
- Hands-on endpoint and EDR experience (e.g., CrowdStrike Falcon) for triage, investigation, and hardening, plus incident response fundamentals and familiarity with MITRE ATT&CK.
- Practical identity and access knowledge across SSO and MFA, Okta or a similar IdP, conditional access, and least-privilege principles.
- Working SIEM experience investigating alerts and separating signal from noise (Datadog a plus), and a habit of building AI or automation workflows that reduce toil, and sharing what you learn.
- Strong written communication and genuine collaboration skills that build trust across IT and engineering and make people want to work with you. If you don't meet every qualification but are excited about this role, we'd still love to hear from you.
If you don’t meet every single qualification but are excited about this role, we’d still love to hear from you.
MORE ABOUT JANE
Jane is a founder-led, high-growth SaaS company with a remote-first team working across Canada, the US, and the UK, united by our mission to help the helpers. This role is remote first. We are not hybrid.
We build the products and tools that thousands of clinics rely on every day to run their businesses, care for their patients, and grow their communities. That level of impact means every person at Jane plays an important role in how we show up for our customers. We're all responsible for being deeply connected to their needs, obsessed with improving their experience, and proud of the difference our work makes in their day-to-day lives.
Jane is growing fast, and that growth brings exciting challenges that call for adaptability, resilience, learning agility, and humility. We're proud of what we've built and quick to admit what we don't know yet. We listen, learn, and adjust as we go. More than 70,000 businesses run on Jane which has 250,000+ practitioners interacting with our product on a daily basis and growth is continuing to accelerate.
Our goal isn't just delivery - it's delight. We move quickly, communicate openly, and solve real problems together. If you're energized by ambiguity, motivated by impact, and eager to learn with others, you'll thrive at Jane.
COMPENSATION & BENEFITS
At Jane, we’re committed to paying fairly, clearly, and above all, paying for growth. This role has an annual salary range of $98,400 to $147,600. While that is a large range, it is intentional. It reflects the full growth journey someone might take in the role, from developing skills early on to becoming highly proficient and ultimately achieving excellence.
Most new hires join at the accomplished stage, which for this role represents an annual salary of $116,900. A starting salary below this typically indicates a candidate with strong potential who is still developing key skills. Salaries above this usually apply to existing team members who have made a significant impact and bring deep Jane-specific knowledge.
We believe in paying for growth. You’ll have regular career development conversations with your manager and your compensation will grow as you gain experience and contribute meaningfully to our mission.
Paying clearly is one of our compensation fundamentals. Watch this https://vimeo.com/880258361 short video to learn how our salary bands are set. You’re also encouraged to ask questions about compensation at any point during the interview process.
We also offer a comprehensive benefits package, You can learn more about it here https://jane.app/documents/hiring/jane_benefits_overview.pdf!
Jane takes job scams and candidate fraud seriously. Jane will only contact you from an @jane.app http://jane.app email address. We'll never contact you from a personal email, ask for payment, or request purchases during the hiring process. If something doesn't seem right, please reach out to us at hiring@jane.app before sharing any personal information.