Senior Security Engineer

This is Engineering at Lattice

Lattice’s Engineering team is continuously working to better both our product and our craft. We use a modern, cutting-edge tech stack and love experimenting with new technologies. We strive for maintainable, robust, and performant code. We’re highly collaborative and continuously iterative and work closely with designers and product managers. We prioritize not only great technical architecture but also an amazing product experience.

As a critical member of Lattice's security team, you will play a pivotal role in auditing and strengthening our identity and access management (IAM) controls. Your responsibilities will include reviewing IAM configurations, pulling audit evidence and writing documentation, capturing configuration screenshots, and ensuring alignment with Lattice's security standards and compliance requirements. This role is ideal for someone with a deep technical understanding of IAM systems and a proactive approach to continuous improvement.

What You Will Do

• Conduct in-depth audits of systems for IAM configurations, ensuring compliance with security standards by gathering audit evidence and capturing configuration screenshots.
• Review and enhance IAM security controls across key corporate systems like Okta (identity and access management), Zscaler (network access controls), and CrowdStrike (endpoint access controls), recommending best practices for improved security.
• Collaborate with IT and engineering teams to assess and optimize IAM configurations, ensuring they support secure, role-based access and effective incident detection.
• Lead compliance initiatives and walkthroughs from a system perspective, including SOC2 audits, by preparing audit documentation specific to IAM controls and ensuring all evidence is properly documented and accessible.
• Proactively manage IAM-related security alerts, triaging incidents to mitigate potential access threats and continually optimizing alert rules and thresholds.
• Develop and maintain detailed documentation for IAM processes, controls, and evidence, ensuring they reflect current industry standards and Lattice security policies.

What You Will Bring to the Table

• 5+ years of experience in security operations, auditing, or IT with a focus on identity and access management systems and security compliance.
• Strong expertise in managing IAM tools and controls within platforms like Okta, Zscaler, and CrowdStrike, with a comprehensive understanding of secure configuration and role-based access control options.
• Demonstrated ability to assess IAM configurations, recommend security improvements, and implement best practices for system hardening.
• Knowledge of compliance frameworks (SOC2 preferred), authentication protocols, access management best practices, and role-based access control methods.

----

The estimated annual cash salary for this role is $166,000 - $207,500. This position is also eligible for incentive stock options, subject to the terms of Lattice’s applicable plans

Benefits: The Company offers the following benefits for this position, subject to applicable eligibility requirements: Medical insurance; Dental insurance; Vision insurance; Life, AD&D, and Disability Insurance; Emergency Weather Support; Wellness Apps; Paid Parental Leave, Paid Time off inclusive of holidays and sick time; Commuter & Parking Accounts; Lunches in the Office; Workplace Amenities Stipend, Internet and Phone Stipend; One time WFH Office Set-Up Stipend; 401(k) retirement plan; Financial Planning; Learning & Development Budget; Sabbatical Program; and Invest in Your People Fund

*Note on Pay Transparency:

Lattice provides an estimate of the compensation for roles that may be hired as required by state regulations. Compensation may vary based on (a) location, as Lattice factors in specific location when benchmarking compensation for most roles; (b) individual candidate skills and qualifications; and (c) individual candidate experience.

Additionally, Lattice leverages current market data to determine compensation, so posted compensation figures are subject to change as new market data becomes available. The salary, other compensation, and benefits information is accurate as of the date of this posting. Lattice reserves the right to modify this information at any time, subject to applicable law.

#LI-remote