IT Security Engineer

CMT is looking for a highly motivated and collaborative IT Security Engineer to join the CMT team. Reporting to the leader of IT Security, you will work in a highly collaborative role, mostly focused on the execution of assigned tasks relating to information technology security, infrastructure, and IT-managed cloud solutions. This role will also serve as a Tier-3 escalation point for our internal Help Desk. This is a highly collaborative role, and communication skills are critical. This is a hybrid role that requires in-office presence at CMT’s headquarters in Cambridge, Massachusetts, at least 3 days per week, or as the work demands. 

CMT is looking for an IT Security Engineer II to help us change the world. CMT has helped protect over 65 million drivers and prevent over 126,000 crashes worldwide. We build AI to solve some of the most difficult challenges in mobility — understanding and reducing risk, detecting crashes, and getting people life-saving help. The problems are hard. The impact is real. No matter your role, your work will matter at CMT. 

Responsibilities: 

• Use independent judgment and discretion to execute assigned tasks in an efficient and effective manner 
• Collaborate with colleagues to implement and update IT processes and infrastructure
• Implement solutions and controls that support adherence to CMT policy 
• Understand security governance control and implement best practices in IT-controlled environments (SaaS, email security, IdP, etc.) 
• Proactively investigate and remediate emerging vulnerabilities impacting endpoints and Saas tools Act as tier 1 incident responder for remediating security incidents, exploits or alternative security events
• Assist in maintaining playbooks for common threats (e.g., email quarantining, phishing, compromised endpoints, internal network intrusion) to standardize incident response 
• Collaborate with security stakeholders and other IT personnel on security-related projects
• Assist with regular security audits on IT systems 
• Provide incident support when needed, which includes, but is not limited to, response, containment, remediation, and go-forward activities 
• Participate in tabletop exercises when needed 
• Respond to security detections, reviewing alerts for false positives or providing next steps for remediation 
• Advanced understanding of Datadog’s product and technology, including advanced queries and alert configuration 
• In-depth knowledge of Jamf’s Security Cloud offering 
• Research, recommend, and implement new technologies and features 
• Apply scripting and code development knowledge to identify security risks within code artifacts, scripts and packages as needed