Security Engineer

• Lead design, deployment, and tuning of Mindvalley’s cybersecurity tooling (SIEM, CSPM, vulnerability scanners, endpoint detection, and SaaS monitoring).
• Manage and optimize GCP Security Command Center, Google Workspace, Okta/Auth0, and integrations across the SaaS ecosystem.
• Automate detection and response using scripting / automation tools.
• Operate the full lifecycle of vulnerability management. Discovery, triage, remediation coordination, validation, and metrics reporting.
• Perform targeted penetration tests and purple-team simulations against high-value assets.
• Correlate findings across multiple tools and automate risk reporting dashboards.
• Continuously harden GCP configurations, GWS configurations and CI/CD pipelines.
• Build secure defaults and reusable controls for Engineering teams (e.g., API authentication patterns, secret management, encryption policies).
• Partner with Product and AI Innovation teams to embed secure development practices and data protection into new services.
• Administer and optimize Okta/Auth0, ensuring robust identity governance, adaptive MFA, and automation of joiner–mover–leaver workflows.
• Review and harden access policies across Google Workspace, GitHub, Slack, and internal apps.
• Design alert enrichment, automated ticket creation, and response playbooks.
• Act as incident commander for security incidents, coordinating detection, containment, and recovery.
• Maintain runbooks, logging pipelines, and retrospectives that feed back into continuous improvement.
• Support audits, vendor security assessments, and risk management processes.
• Maintain key security KPIs and dashboards for leadership reporting.

Senior Cybersecurity Engineer

Advanced Cyber Security Architect, Engineer