IT Security Engineer

A bit about usTrek is an awesome place to work, with amazing benefits for all employees. We build only products we love, provide incredible hospitality to our customers, and change the world by getting more people on bikes. When you’re on our team, you’re taken care of, encouraged to learn and grow, and given lots of opportunities to do so.

Give us your best, and we’ll give it right back. Sound pretty sweet? Then come join us!

Job Description

Location:

Trek Waterloo HQ (Hybrid)
Role Summary Help us secure the Awesome Bus! We are looking for someone to join our global cybersecurity team. We are a highly effective team that works to protect and defend against intrusions into Trek's systems.

The Information Security Engineer owns two of the security program's most operationally critical functions:
Identity & Access Management (IAM) and Security Operations (SOC). This is a senior individual contributor role — you won't manage people, but you will own the technical controls that govern who can access Trek's systems and how threats against those systems are detected and contained.

You will be the hands-on owner of Trek's identity infrastructure — Microsoft Entra , privileged access, joiner-mover-leaver processes, and access governance — while simultaneously operating as Trek's primary security analyst: monitoring for threats, investigating incidents, and running detection and response workflows across Crowd Strike Falcon, Zscaler, and Microsoft Sentinel. This role demands both the precision of an IAM engineer and the instincts of a SOC analyst.

You will work closely with the Director of IT Security and collaborate cross-functionally with IT, HR, Legal, and engineering teams across Trek's global environment.

If you want a role where no two days are the same, where you own real enterprise security infrastructure, and where the work you do directly protects a globally recognized brand — this is it.

Key Responsibilities Identity & Access Management Own the IAM program lifecycle: identity governance, role-based access control (RBAC), access certification, joiner-mover-leaver (JML) processes, and policy enforcement

Administer and optimize Microsoft Entra  (Azure AD) including SSO, MFA, Conditional Access policies, and directory health

Design and maintain a least-privilege access model across SaaS, cloud, and on-premises systems, including privileged access management (PAM)
Drive access certification campaigns: scope, execute, and report on periodic entitlement reviews across all systems

Develop and enforce IAM policies, standards, and procedures — including third-party and service account governance

Detect and investigate identity-based threats: anomalous authentication, lateral movement indicators, credential abuse, and over-privileged account activity

Partner with HR, IT, and application teams to ensure processes are accurate, automated where possible, and consistently enforced

Support audit and compliance activities with identity evidence and access control documentation

Security Operations Serve as Trek's primary security analyst: monitor alerts across Crowd Strike Falcon, Microsoft Sentinel, and Zscaler; triage, investigate, and escalate as warranted

Own the incident response lifecycle for security events — from initial detection through containment, eradication, recovery, and post-incident review

Develop, tune, and maintain detection rules and correlation logic across SIEM and EDR platforms to reduce noise and surface high-confidence detections

Build and maintain incident response playbooks, investigation runbooks, and post-incident documentation

Integrate identity signals and IAM data into SOC detection workflows — connecting the IAM and SOC functions into a unified threat detection capability

Conduct threat hunting using Crowd Strike, Sentinel, and Zscaler telemetry to proactively identify attacker activity that evades automated detection

Orchestrate and automate security operations workflows to improve speed and consistency across the security team Evangelize information security practices within Trek worldwide

Perform other duties as assigned

Leveraging AIAt Trek we view artificial intelligence as a competitive…