SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
ShipMonk is a tech-powered 3PL (third-party logistics provider) operating 12+ fulfillment centers across the US, Canada, the UK, and Europe, serving high-growth ecommerce and DTC brands. The Security team covers compliance, incident response, identity, and security operations across the entire company.
In this role, you will work across all security domains rather than specializing in one area. Your time will be split roughly evenly between day-to-day security operations and building new capabilities the company doesn't yet have. You'll be expected to use AI tools to improve work efficiency and strengthen the company's security posture.
Key responsibilities include:
**Identity and Access Management:** Own Okta security policies and privileged access management; audit integrated applications; run regular access review cycles; manage secure access request processes.
**Incident Response & Investigations:** Triage, contain, and analyze security incidents; reconstruct incident timelines; provide evidence to Legal and HR teams; review reported phishing attempts.
**Detection & Monitoring:** Automatically read and process logs; set up automated playbooks for core tools including Okta, AWS, Snowflake, Google Workspace, and ShipMonk's proprietary platform; build detection engineering and threat hunting capabilities.
**Cloud, SaaS & Endpoint Security:** Secure Google Workspace, SSO/SAML integrations, and third-party OAuth applications; define MDM security baselines; provide security input early in design decisions.
**Compliance & Risk Management:** Support SOC 2 Type II, GDPR, and ISO 27001 compliance frameworks; coordinate penetration tests and remediation follow-up; respond to customer security questionnaires; run vendor assessments and subprocessor management; maintain the risk register.
**AI-Assisted Security:** Use AI tools for investigations, log analysis, detection writing, and automation; help shape how the team uses AI safely and effectively.
**Security Awareness:** Run security communications, phishing simulations, and tabletop exercises.
This is an opportunity to build a security function rather than maintain one. Half your time goes to new capabilities: detection engineering, automated playbooks, and threat hunting. You'll design these systems, choose the approach, and see them run in production. The wide scope is intentional—you'll touch identity, incident response, cloud, compliance, and awareness in the same quarter, enabling faster growth than in a specialized role.
**Requirements:**
- 3+ years in security engineering, security operations, or similar role
- Hands-on experience with incident response and log analysis
- Strong IAM skills: Okta or similar identity provider, SSO/SAML, MFA
- Experience securing cloud and SaaS environments (Google Workspace, GCP, AWS)
- Experience with a SIEM and writing detection rules
- Scripting skills (Python or similar) and comfort working with APIs
- Working knowledge of SOC 2 or ISO 27001
- Hands-on use of AI tools (LLM assistants, coding agents) in daily work
- Agile mindset with a habit of learning and adapting
- Fluency in English and ability to push security work forward across teams
**Nice to have:** Vanta, Datadog, Snowflake, GitLab, or threat hunting experience.
