Full-time jobs in Pittsburgh, PA

About the role

Gecko is seeking an Enterprise Security Engineer to help build and operate the shared systems that protect our people, devices, applications, and sensitive data. You will sit within InfoSec Engineering and partner closely with IT Engineering. Your primary focus will be workforce endpoint and device security, identity security, SaaS and OAuth governance, enterprise detections, and the protection of regulated data. Responsible use of AI tools is an important example. Gecko should be able to benefit fully from emerging technology without misusing sensitive data or creating unacceptable security, privacy, contractual, or compliance risk. This role will help establish the systems, guardrails, and guidance that make responsible adoption possible.

What you'll bring

• Identity management (e.g., Okta, Onelogin, Active Directory)
• MDM systems (e.g., Jamf, Intune, NinjaOne)
• EDR/MDR tools (e.g., CrowdStrike, TrendMicro, SentinelOne)
• AI management (e.g., Claude, ChatGPT, Cursor, Grok)
• Government security frameworks (FedRAMP, CMMC, NIST 800-171, NIST 800-53, CUI handling)
• Commercial security frameworks (SOC2 Type II, ISO 27001, ISO 42001)
• 3+ years of experience in Enterprise Security Engineering, Security Engineering, IT Security, or a related hands-on security engineering role.
• Hands-on experience administering endpoint management and endpoint detection and response (EDR) solutions in production environments.
• Experience administering or securing identity and access management (IAM) platforms, including SSO, MFA, or lifecycle management
• Experience evaluating, governing, or administering SaaS applications, OAuth integrations, and enterprise security controls.
• Experience working with regulated, customer-protected, or other sensitive data (e.g., CUI, HIPAA, PCI, SOC 2).
• Strong systems configuration, troubleshooting, workflow design, and operational ownership skills.

Benefits

Locations