Enterprise Security Engineer

📋 Job Overview

Join Jane as our new Enterprise Security Engineer, where you'll help harden the systems, endpoints, and identities that protect Jane and the sensitive health information our customers trust us with. You'll take on hands-on work across endpoint security, incident response, identity and access, and data protection. If you're energized by reducing real-world attack surface, comfortable owning well-scoped work end to end, and excited about using AI and automation to amplify your impact, we'd love to hear from you.

🏢 About Jane

Jane is a founder-led, high-growth SaaS company with a remote-first team working across Canada, the US, and the UK, united by our mission to help the helpers. This role is remote first. We are not hybrid. We build the products and tools that thousands of clinics rely on every day to run their businesses, care for their patients, and grow their communities. That level of impact means every person at Jane plays an important role in how we show up for our customers.

🎯 The Role

You'll work closely with our Staff Enterprise Security Engineer on the day to day hardening work, and with me on where the function is headed next. I look for people who treat security as a partnership, not a gate, and who want real ownership, and the room to grow into it. This role offers both.

✅ Key Responsibilities

• Own Jane's endpoint hardening baseline, including CIS benchmark adoption, EDR coverage and tuning in CrowdStrike Falcon, and workstation and mobile vulnerability management, coordinating with IT to close findings within SLA.
• Investigate, contain, and document security incidents and carry a share of the on-call rotation (roughly 5 to 6 weeks a year), escalating at the right time to the right people and keeping runbooks accurate based on real experience.
• Strengthen identity and access by helping roll out phishing-resistant MFA (FIDO2), Okta device trust and conditional access, and a BYOD program, partnering with IT to keep least-privilege posture healthy across systems.
• Help stand up data-protection controls (SASE, CASB, DLP, egress filtering, and PHI handling) along with the guardrails that govern internal AI usage across tools, agents, MCP servers, and their access controls.
• Tune detections and signal-to-noise in our SIEM (Datadog) and build AI-assisted automation that reduces toil, sharing wins and failures openly so the whole team gets better.

📌 Required Qualifications

• 2 to 4 years in enterprise or infrastructure security, security operations, or incident response, with a track record of taking ownership and growing your skills.
• Hands-on endpoint and EDR experience (e.g., CrowdStrike Falcon) for triage, investigation, and hardening, plus incident response fundamentals and familiarity with MITRE ATT&CK.
• Practical identity and access knowledge across SSO and MFA, Okta or a similar IdP, conditional access, and least-privilege principles.
• Working SIEM experience investigating alerts and separating signal from noise (Datadog a plus), and a habit of building AI or automation workflows that reduce toil, and sharing what you learn.
• Strong written communication and genuine collaboration skills that build trust across IT and engineering and make people want to work with you.

⭐ Desirable Experience

• Experience with AI and automation in security operations.

🎁 Benefits

This role has an annual salary range of $98,400 to $147,600. Most new hires join at the accomplished stage, which for this role represents an annual salary of $116,900.

🛂 Visa & Eligibility

Remote-first team working across Canada, the US, and the UK.