3 days ago
Prague, CzechiaMid Level
Responsibilities
- Own Okta security policies, privileged access, integrated-application audits, access reviews, and secure access-request processes.
- Triage, contain, and analyze security incidents; reconstruct timelines; provide evidence to Legal and HR; and review phishing reports.
- Process logs automatically, create detection rules, establish threat-hunting capabilities, and build automated playbooks for Okta, AWS, Snowflake, Google Workspace, and the ShipMonk application.
- Secure Google Workspace, SSO/SAML integrations, third-party OAuth applications, cloud and SaaS environments, and endpoint-management baselines.
- Support SOC 2 Type II, GDPR, and ISO 27001 programs; coordinate penetration tests; manage remediation, vendor assessments, subprocessors, and the risk register.
- Use AI tools for investigations, log analysis, detection writing, automation, and compliance work, and help define safe and effective AI usage.
- Run security communications, phishing simulations, and tabletop exercises.
Requirements
- At least 3 years of experience in security engineering, security operations, or a similar role.
- Hands-on experience with incident response and log analysis.
- Strong IAM skills, including Okta or a similar identity provider, SSO/SAML, and MFA.
- Experience securing cloud and SaaS environments such as Google Workspace, GCP, or AWS.
- Experience with a SIEM and writing detection rules.
- Scripting skills in Python or a similar language and comfort working with APIs.
- Working knowledge of SOC 2 or ISO 27001.
- Hands-on daily use of AI tools such as LLM assistants or coding agents.
- Fluency in English and ability to advance security work across teams.
- Preferred qualifications include Vanta, Datadog, Snowflake, GitLab, or threat-hunting experience.
Benefits
- Opportunity to build a security function and new capabilities such as detection engineering, automated playbooks, and threat hunting.
- Broad ownership across identity, incident response, cloud, compliance, and security awareness.
- Opportunity to experiment with AI tools and help shape their safe use in security work.
Tech Stack
Categories
About ShipMonk
ShipMonk provides technology-driven third‑party logistics for ecommerce brands, combining order, inventory, and warehouse management software with a network of owned fulfillment centers. Merchants use ShipMonk to store goods, pick/pack, and ship DTC, retail, and B2B orders via integrations with major ecommerce platforms and carriers. Founded in 2014 and headquartered in Fort Lauderdale, Florida, the privately held company operates facilities across the U.S., Canada, the U.K., and Europe.