IT Security Engineer
Latacora
IT Security Engineer
Latacora
Embedded retained security team for startups
Latacora develops, grows, and maintains information security practices for tech-forward companies. We believe security is too broad and complex for one person to handle alone, so we give clients access to a team of specialists across application security, infrastructure security, detection and response, corporate security, risk and compliance, and security strategy. Our approach combines deep expertise with practical advice designed for the realities of growing companies.
IT Security helps organizations build strong IT foundations and scalable practices
that improve security outcomes. We operate as a strategic security partner,
working through each client's designated point of contact to build lasting
capability. We are not staff augmentation, end-user support, or managed IT.
Our surface is identity, devices, and the corporate SaaS layer: who can access what,
on which machine, and how that stays true as a company grows from 40 people to
400. Concretely that means identity providers (Google Workspace, Okta, Microsoft
Entra), MDM platforms (Jamf, Intune, Kandji), Apple Business Manager, 1Password,
and Slack, plus the Latacora-managed tooling we wire into them: Panther for log
sources and Sublime for email and phishing defense.
As an IT Security Engineer, you'll independently own IT Security delivery for a portfolio of
client engagements.
What You’ll Do
Independently own IT Security delivery for a portfolio of client engagements, working through each client's designated point of contact
Build relationships with client stakeholders, participate in regular check-ins, and communicate priorities, risks, and progress.
Assess and improve security configurations across identity providers, device management platforms, and corporate SaaS environments.
Perform hands-on technical implementation, including administrative configuration, integrations, security baselines, and automation.
Guide client teams through changes in hands-off engagements, explaining technical decisions and helping stakeholders understand implementation requirements.
Build and maintain a prioritized IT Security roadmap based on risk, business impact, implementation complexity, and available resources.
Participate in Security Architecture Reviews as the IT Security and CorpSec subject-matter expert
We're looking for demonstrated technical capability, sound judgment, and the
ability to independently deliver results. A specific number of years in IT or security
is not required.
Strong hands-on experience configuring, securing, and troubleshooting modern identity platforms such as Okta, Microsoft Entra, or Google Workspace.
Practical knowledge of identity and access management, including SAML, OAuth/OIDC, SCIM, conditional access, MFA, and role-based access controls.
Experience implementing and troubleshooting identity integrations and automated provisioning workflows in production environments.
Hands-on device management experience, including MDM configuration, security baselines, disk encryption, patch enforcement, and device enrollment.
Understanding of Apple Business Manager and modern device deployment practices.
Experience designing and improving IT Security processes, rather than only operating established workflows.
Ability to assess an environment, identify meaningful risks, and recommend practical improvements.
Strong troubleshooting skills and the judgment to understand the potential impact of changes in production environments.
Ability to manage multiple client engagements, prioritize competing needs, and maintain consistent follow-through.
Strong written and verbal communication, including explaining security decisions to technical and nontechnical audiences.
Ability to influence outcomes without direct control over client systems or personnel.
Comfort working independently, navigating ambiguity, and recognizing when a problem requires additional expertise or escalation.
Willingness to share knowledge, review others' work, and contribute to team-wide technical improvements.
Experience supporting multiple client environments in consulting, managed services, or fractional IT roles.
Experience owning or advising on IT Security for growing technology companies.
Hands-on experience with email security and phishing defenses, including Sublime or similar products.
Experience implementing SIEM integrations, log pipelines, or security monitoring tools.
Familiarity with SOC 2, ISO 27001, or other security and compliance frameworks.
Experience managing SaaS and identity configurations through Terraform or other infrastructure-as-code tools.
Our client-facing IT Security practice focuses on building and improving secure systems
rather than operating a client's day-to-day IT function.
This is a remote role. Because a substantial portion of our team and clients is in US time zones, you’ll need consistent overlap with US working hours. We can hire anywhere in the United States and in a number of other countries.
For US applicants, the compensation range is $110,000–$130,000 USD annually, depending on experience
US benefits include:
401(k): Dollar-for-dollar match up to the federal pre-tax contribution limit ($24,500 for 2026), with immediate eligibility and no vesting period. We also offer a Mega Backdoor Roth option, allowing for additional after-tax contributions and Roth conversions.
Flexible vacation
Paid sick leave for yourself or to care for family members.
Paid parental leave: 12 weeks after one year of employment.
Medical and military leave after one year of employment.
Healthcare coverage: 100% of premiums covered for employees and their families, including domestic partners, plus employer HSA contributions for eligible plans.
Security careers rarely follow a single path. If this role interests you but your experience does not align perfectly with every qualification, we still encourage you to apply. Tell us how your background, judgment, and perspective could contribute to the work.
Latacora is an equal opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, pregnancy or related medical conditions, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable law.
Latacora provides security as a service by embedding a dedicated security team with a startup for about a year. The team virtually joins the engineering group to run security, build secure practices, and guide secure software and system rollout, with a focus on integrating security into the development workflow. At the end of the engagement, Latacora helps hire a full-time security professional to replace them, ensuring continuity. The approach differs from one-off audits by offering a long-term, hands-on security partnership that builds internal capability and sustains security operations.
Explore more opportunities at Latacora