Security Engineer, Enterprise Security at Turo

San Francisco, California, United States

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level

Full TimeJob Type

UnknownVisa

TechnologyIndustries

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience
3+ years of experience in enterprise security, with a focus on Zero Trust, Advanced Email Security, DLP, and Endpoint Security
Proven experience in Zero Trust architecture design and implementation
Strong knowledge of identity governance frameworks, SaaS security, and compliance requirements like SOX and SOC 2
Experience with Incident Response and advanced threat detection methodologies (experience with SOAR tools like Tines is highly preferred)
Proficiency in scripting and automating security processes using Python, PowerShell, or similar languages
Experience with IAM technologies such as Okta, Sailpoint, etc
Experience with Endpoint Management and Detection technologies such as JAMF, Kandji, Crowdstrike, etc
Experience with configuration management and infrastructure as code tools (e.g., Ansible, Terraform)
Experience working on cloud infrastructure, especially AWS and its Security services suite
Solid understanding or experience working in containerized environments and familiarity with GitOps flow
Proven ability to work independently with minimal supervision and ability to perform and oversee complex tasks and prioritize multiple tasks based on overall strategic goals
Real passion for technology and desire to build tooling from ground-up and to tackle complex problems with creative solutions
Capability to interface with multiple levels of the organization and to serve as an influencer

Responsibilities

Lead the implementation of Zero Trust security frameworks across the enterprise, focusing on continuous verification and least privilege access models
Develop and manage Advanced Email Security solutions to protect against phishing, spoofing, and other email-based attacks
Deploy and maintain Data Loss Prevention (DLP) technologies to prevent unauthorized access or exfiltration of sensitive data
Implement and enhance Insider Threat prevention programs to mitigate risks from internal actors
Manage and optimize Endpoint Security solutions to safeguard all corporate devices
Collaborate with Identity and Access Governance teams to enforce secure and efficient access control policies
Ensure ongoing compliance with SOX and SOC 2 standards, performing regular audits and gap assessments
Deliver Security Awareness Training programs to educate employees on the latest security threats and best practices
Advocate for and deploy Infrastructure as Code to automate security configurations and infrastructure, specifically using Terraform
Lead Incident Response efforts for enterprise security, developing automation playbooks, conducting root cause analysis to mitigate security incidents swiftly and participate in security on-call rotation
Establish and maintain a robust SaaS Security Posture to ensure third-party services are securely integrated
Collaborate with cross-functional teams to integrate security into all stages of the Software Development Life Cycle (SDLC)

Skills

Key technologies and capabilities for this role

Zero TrustAdvanced Email SecurityDLPInsider Threat PreventionEndpoint SecurityIdentity and Access GovernanceSecurity Awareness TrainingInfrastructure as CodeSOARSOXSOC 2SaaS Security Posture

Questions & Answers

Common questions about this position

What is the salary for this Security Engineer position?

This information is not specified in the job description.

Is this a remote position or what is the location requirement?

This information is not specified in the job description.

What skills and experience are required for this role?

Candidates need 3+ years of experience in enterprise security focusing on Zero Trust, Advanced Email Security, DLP, and Endpoint Security, plus proven experience in Zero Trust architecture, identity governance, SaaS security, SOX/SOC 2 compliance, and Incident Response with SOAR tools.

What does the team and work environment look like at Turo?

The team focuses on securing enterprise systems and data by building Zero Trust principles, with collaboration across cross-functional teams to integrate security into the SDLC, and involvement in on-call rotation for incident response.

What makes a strong candidate for this Security Engineer role?

A strong candidate has a Bachelor’s degree in Computer Science, Information Security, or equivalent, 3+ years in enterprise security with expertise in Zero Trust, email security, DLP, endpoint security, and a proactive mindset for threats and compliance.

Turo

Peer-to-peer car sharing platform for rentals

About Turo

Turo operates in the peer-to-peer car sharing market, allowing private car owners to rent out their vehicles to others. Car owners can list their vehicles on Turo’s platform, where they set their own rental prices and availability. Renters can browse these listings, select a vehicle that meets their needs, and book it for a specific time. Turo facilitates the transaction by providing insurance coverage and customer support, ensuring a smooth experience for both car owners and renters. The company earns revenue by taking a percentage of the rental fee, which aligns its interests with those of its users. Turo stands out from competitors by offering a diverse range of vehicles, including everyday cars, luxury, and specialty options. The goal of Turo is to provide a flexible and cost-effective alternative to traditional car rental services, leveraging the sharing economy to connect car owners with renters.

San Francisco, CaliforniaHeadquarters

2009Year Founded

$451.3MTotal Funding

POST_IPO_EQUITYCompany Stage

Automotive & Transportation, Consumer GoodsIndustries

1,001-5,000Employees

Risks

Negative incidents involving rented vehicles could damage Turo's reputation.

New competitors like ZEV co-op could capture market share with eco-friendly models.

Market volatility could impact Turo's IPO plans and investor confidence.

Differentiation

Turo offers a wide variety of vehicles, from everyday to luxury models.

The platform provides a cost-effective alternative to traditional car rental services.

Turo's commission-based model aligns its interests with users' successful transactions.

Upsides

Turo's partnership with United Airlines enhances customer acquisition and retention.

Expansion in Australia indicates potential for further international market penetration.

Winning the unitQ Quality Excellence Award highlights Turo's commitment to customer experience.

Land your dream remote job 3x faster with AI

Try Jobo Free