EU remote
Security Engineer
About this role
ShipMonk isn't just a 3PL — we're the tech-powered growth partner for ecommerce brands, running 12+ owned fulfillment centers across the US, Canada, the UK, and Europe so our merchants can stress less and grow more. About the role ShipMonk is a fast-growing 3PL whose operations run 24/7 across Europe and the US. Our Security team covers compliance, incident response, identity, and security operations for the whole company.
We're hiring an engineer who will work across all of these areas rather than specialize in one. Your time will be split roughly evenly between day-to-day operations and building the capabilities we don't have yet. AI is part of how we work. We expect you to adapt quickly and use AI tools to improve work efficiency and strengthen our company's security posture. What you'll do Identity and access: own Okta security policies, Okta privileged access; audit integrated apps; run a regular access review cycle, secure access requests process.
Incident response and investigations: triage, contain and analyse incidents; reconstruct timelines; provide evidence to Legal and HR; review reported phishing. Detection and monitoring: automatically read and process logs, and set up automated playbooks for our core tooling such as Okta, AWS, Snowflake, Google Workspace, and our ShipMonk app; build detection engineering and threat hunting capabilities. Cloud, SaaS and endpoint security: secure Google Workspace, SSO/SAML integrations and third-party OAuth apps; define MDM security baselines; give security input early in design decisions.
Compliance and risk: support SOC 2 Type II, GDPR, and ISO27001 security frameworks; coordinate penetration tests and follow up on remediation. Respond to customer security questionnaires; run vendor assessments and subprocessor management; maintain the risk register. AI-assisted security: use AI tools for investigations, log analysis, detection writing, automation and compliance work; help shape how the team uses AI safely and effectively.
Awareness: run security communications, phishing simulations and tabletop exercises. What you bring 3+ years in security engineering, security operations or similar role Hands-on experience with incident response and log analysis. Strong IAM skills: Okta or a similar identity provider, SSO/SAML, MFA Experience securing cloud and SaaS environments such as Google Workspace, GCP, or AWS. Experience with a SIEM and writing detection rules.