The opportunity
ShipMonk is a fast-growing 3PL whose operations run 24/7 across Europe and the US. Our Security team covers compliance, incident response, identity, and security operations for the whole company.
What you'll do
Identity and access: own Okta security policies, Okta privileged access; audit integrated apps; run a regular access review cycle, secure access requests process.
Incident response and investigations: triage, contain and analyse incidents; reconstruct timelines; provide evidence to Legal and HR; review reported phishing.
Detection and monitoring: automatically read and process logs, and set up automated playbooks for our core tooling such as Okta, AWS, Snowflake, Google Workspace, and our ShipMonk app; build detection engineering and threat hunting capabilities.
Cloud, SaaS and endpoint security: secure Google Workspace, SSO/SAML integrations and third-party OAuth apps; define MDM security baselines; give security input early in design decisions.
Compliance and risk: support SOC 2 Type II, GDPR, and ISO27001 security frameworks; coordinate penetration tests and follow up on remediation. Respond to customer security questionnaires; run vendor assessments and subprocessor management; maintain the risk register.
AI-assisted security: use AI tools for investigations, log analysis, detection writing, automation and compliance work; help shape how the team uses AI safely and effectively.
What they're looking for
- Awareness: run security communications, phishing simulations and tabletop exercises.
