SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 85,000 - 105,000 / annual
Axios is a media company dedicated to delivering trustworthy news with efficiency and clarity. This IT Security Specialist role sits on the IT team and focuses on protecting Axios's systems, devices, identities, applications, and workflows.
Security at Axios is understood holistically—not just deploying tools, but assessing how systems are used, evaluating fitness for purpose, and identifying risks created by workflows, permissions, configurations, vendors, and user behavior. This role embeds security into technology decisions from evaluation and procurement through implementation, monitoring, and continuous improvement.
Key responsibilities include:
**Endpoint & Identity Security:**
- Own security for Axios's Mac fleet, including Jamf, compliance, monitoring, alert investigation, malware response, and device remediation
- Own Okta-based identity and access management, including adaptive MFA, authentication, SSO, application assignments, access scopes, and joiner/mover/leaver processes
- Partner with People, Legal, and Infrastructure to improve provisioning, offboarding, access removal, archival, legal holds, and lifecycle automation
**SaaS & Application Security:**
- Establish and maintain security configurations and risk controls for core services and SaaS applications, including authentication, access, collaboration, email security, data protection, alerting, activity monitoring, vendor and procurement reviews, security questionnaires, and recommended safeguards
- Treat the browser and SaaS layer as critical security boundaries, evaluating how users access data and applications and where browser-based workflows create risk
**Monitoring & Incident Response:**
- Use logs and activity monitoring across endpoints, browsers, identity systems, Google Workspace, and SaaS applications to investigate suspicious activity and support incident response
- Assess systems, tools, permissions, and workflows for security, operational fit, and long-term supportability
- Help protect high-risk users, including journalists and executives, through appropriate privacy, account-security, and personal-data protections
**Security Awareness & AI Security:**
- Own security awareness programs, including human risk, phishing simulations, reporting workflows, completion tracking, and targeted training for higher-risk users
- Design and deliver customized training for different parts of the company (newsroom, journalists, business teams, technical teams) based on their workflows and threat models
- Develop practical AI security policies and guidance, and review AI tools, automations, agents, and internally built solutions for data handling, permissions, authentication, authorization, secrets management, logging, monitoring, human oversight, and operational readiness
This is an opportunity to shape security inside an AI-enabled media company with meaningful ownership across the technology environment and workflows built on top of it.
**Requirements:**
- Substantial experience in IT security, endpoint security, identity and access management, systems administration, or a related field
- Hands-on experience with macOS, Jamf or comparable endpoint platforms, CrowdStrike Falcon, Okta or a similar identity provider, and Google Workspace security
- Understanding of modern security boundaries across browsers, SaaS applications, identity providers, endpoints, APIs, data flows, and AI-enabled systems
- Experience with security logging, monitoring, incident investigation, vendor assessments, and SaaS risk management
- Experience operating or improving security awareness, phishing, or role-specific training programs
- Ability to evaluate risk in the context of real-world workflows, users, business requirements, and operational constraints
