Security Engineer, Enterprise Security

Turo is the world’s largest car sharing marketplace.

We are looking for a versatile Security Engineer to support and execute our efforts in securing enterprise systems and data through the daily operation, administration, and implementation of our security framework. The role focuses heavily on building out and maintaining Zero Trust principles across the organization under the strategic direction of the Senior Engineer and Manager.

• Implement Zero Trust security frameworks across the enterprise, focusing on daily enforcement of least privilege models.
• Administer and maintain Advanced Email Security solutions to protect against phishing, spoofing, and other email threats.
• Deploy, operate, and triage alerts for Data Loss Prevention (DLP) and Insider Threat prevention technologies.
• Manage and optimize Endpoint Security configurations (e.g., Crowd Strike, Kandji) to safeguard corporate devices.
• Collaborate with Identity Governance teams to administer and enforce secure user access control policies (e.g., Okta lifecycle workflows).
• Gather evidence and verify controls to ensure ongoing compliance with SOX and SOC2 standards.
• Deliver and manage regular Security Awareness Training programs and phishing simulations.
• Use Infrastructure as Code (Terraform templates) to maintain automated security configurations.
• Participate in the Incident Response on‑call rotation, triage security alerts, execute automation playbooks, and mitigate incidents swiftly.
• Evaluate and maintain the baseline security posture of integrated third‑party SaaS applications.

• 3+ years of experience in enterprise security, focusing on core administration of email security, DLP, or endpoint detection tools.
• Solid knowledge of identity governance, SaaS security baselines, and standard compliance frameworks (SOX/SOC2).
• Proficiency in scripting basic security automations using Python or Power Shell.
• Familiarity with or baseline experience working with containerized environments, Git Ops workflows, and AWS security suites.
• Industry certifications such as Security+, GSEC, or CEH are a plus.

• Target base salary range in San Francisco: $124,000–$155,000 annually.

• Eligible for equity and benefits, including employer‑paid medical, dental, and vision insurance; retirement employer match; learning & development stipend; paid time off and holidays; parental leave; and more.

The role is hybrid, with an in‑office requirement of at least three days per week (Monday, Wednesday, Thursday) to support a collaborative work environment.

Turo is an Equal Opportunity Employer and a participant in the U.S. Federal E‑Verify program. Women, minorities, individuals with disabilities, and protected veterans are encouraged to apply. We welcome people of different backgrounds, experiences, abilities, and perspectives. Turo will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance, as applicable.