Security Engineer, Enterprise Security

About The Team

Turo is searching for a highly motivated and versatile Security Engineer to spearhead our efforts in securing enterprise systems and data through the design, implementation, and continuous improvement of a comprehensive security framework. This role will focus heavily on building out Zero Trust principles across the organization, ensuring the integrity of our systems and protecting against emerging threats.

Key areas of focus include Advanced Email Security, Data Loss Prevention (DLP), Insider Threat prevention, Endpoint Security, Identity and Access Governance, Security Awareness Training, Configuration management and Infrastructure as Code, Incident Response (SOAR automation), Regulatory Compliance and SaaS Security Posture.

The successful candidate will be an expert in these domains and have a proactive mindset for staying ahead of potential threats and regulatory requirements.

What you will do

• Lead the implementation of Zero Trust security frameworks across the enterprise, focusing on continuous verification and least privilege access models.
• Develop and manage Advanced Email Security solutions to protect against phishing, spoofing, and other email-based attacks.
• Deploy and maintain Data Loss Prevention (DLP) technologies to prevent unauthorized access or exfiltration of sensitive data.
• Implement and enhance Insider Threat prevention programs to mitigate risks from internal actors.
• Manage and optimize Endpoint Security solutions to safeguard all corporate devices.
• Collaborate with Identity and Access Governance teams to enforce secure and efficient access control policies.
• Ensure ongoing compliance with SOX and SOC 2 standards, performing regular audits and gap assessments.
• Deliver Security Awareness Training programs to educate employees on the latest security threats and best practices.
• Advocate for and deploy Infrastructure as Code to automate security configurations and infrastructure, specifically using Terraform.
• Lead Incident Response efforts for enterprise security, developing automation playbooks, conducting root cause analysis to mitigate security incidents swiftly and participate in security on-call rotation.
• Establish and maintain a robust SaaS Security Posture to ensure third-party services are securely integrated.
• Collaborate with cross-functional teams to integrate security into all stages of the Software Development Life Cycle (SDLC).
  
  

Your profile

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience.
• 3 years of experience in enterprise security, with a focus on Zero Trust, Advanced Email Security, DLP, and Endpoint Security.
• Proven experience in Zero Trust architecture design and implementation.
• Strong knowledge of identity governance frameworks, SaaS security, and compliance requirements like SOX and SOC 2.
• Experience with Incident Response and advanced threat detection methodologies (experience with SOAR tools like Tines is highly preferred).
• Proficiency in scripting and automating security processes using Python, PowerShell, or similar languages.
• Experience with IAM technologies such as Okta, Sailpoint, etc.
• Experience with Endpoint Management and Detection technologies such as JAMF, Kandji, Crowdstrike, etc.
• Experience with configuration management and infrastructure as code tools (e.g., Ansible, Terraform).
• Experience working on cloud infrastructure, especially AWS and its Security services suite
• Solid understanding or experience working in containerized environments and familiarity with GitOps flow
• The proven ability to work independently with minimal supervision and ability to perform and oversee complex tasks and prioritize multiple tasks based on overall strategic goals
• Real passion for technology and desire to build tooling from ground-up and to tackle complex problems with creative solutions.
• The capability to interface with multiple levels of the organization and to serve as an influencer and a team player
• Strong presentation, facilitation, and written/verbal communication skills
• Industry certifications such as CISSP, CISM, CEH, or GIAC are a plus.
  
  

For this role, the target base salary range in San Francisco is $120,000-$150,000 annually. This role is also eligible for equity and benefits. In general, our ranges reflect the market-based target for new hire salaries based on the level and location of the role. Within the range, individual pay is determined by objective factors assessed during the application and interview process, such as job-related skills, experience, and relevant education or training. We encourage you to talk with your recruiter to learn more about the total compensation and benefits available for this role.

Turo highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Turists will be expected to work in the office 3 days per week on Mondays, Wednesdays, and Thursdays. Turo considers working in the office at least 3 days per week to be an essential function of this hybrid role. Your recruiter can share more information about the various in-office perks Turo offers.

Benefits

• Competitive salary, equity, benefits, and perks for all full-time employees
• Employer-paid medical, dental, and vision insurance (Country specific)
• Retirement employer match
• Learning & Development stipend to invest in your professional development
• Turo host matching program
• Turo travel credit
• Cell phone and internet stipend
• Paid time off to relax and recharge
• Paid holidays, volunteer time off, and parental leave
• For those who are in the office full-time or hybrid we have in-office lunch, office snacks, and fun activities
  
  

We are committed to building a diverse team. If you are from a background that's underrepresented in tech, we'd love to meet you.

Aside from an award winning work environment and the opportunity to be part of the world’s largest car sharing marketplace, we are also growing the team quickly - join us! Even if you don't meet every qualification, we are looking for people with enthusiasm for what we do and we will consider you for this and other possibilities.

About Turo

Turo is the world’s largest car sharing marketplace where you can book the perfect car for wherever you’re going from a vibrant community of trusted hosts across the US, UK, Canada, Australia, and France. Whether you're flying in from afar or looking for a car down the street, searching for a rugged truck or something smooth and swanky, Turo puts you in the driver's seat of an extraordinary selection of cars shared by local hosts.

Discover Turo at https://turo.com, the App Store, and Google Play, and check out our blog, Field Notes.

Read more about the Turo culture according to Turo CEO, Andre Haddad.

Turo is an Equal Opportunity Employer and a participant in the U.S. Federal E-Verify program. Women, minorities, individuals with disabilities and protected veterans are encouraged to apply. We welcome people of different backgrounds, experiences, abilities and perspectives.

Turo will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance, as applicable.

We welcome candidates with physical, mental, and/or neurological disabilities. If you require assistance applying for an open position, or need accommodation during the recruiting process due to a disability, please submit a request to People Operations by emailing PeopleOps@turo.com.