IT Security Specialist
Axios is hiring an IT Security Specialist to own corporate security across its Mac fleet (Jamf), Okta identity and access management, Google Workspace, SaaS and browser-layer security, monitoring, awareness training, and AI security policies. Day to day this means endpoint and identity administration, alert investigation and incident response, vendor risk reviews, and building training and AI-secu
- Compensation
- $85K–$105K / yr
- Location
- Remote
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Substantial experience in IT security, endpoint security, identity and access management, systems administration, or a related field
- Hands-on experience with macOS, Jamf or comparable endpoint platforms, CrowdStrike Falcon, Okta or a similar identity provider, and Google Workspace security
- Understands modern security boundaries across browsers, SaaS applications, identity providers, endpoints, APIs, data flows, and AI-enabled systems
- Experience with security logging, monitoring, incident investigation, vendor assessments, and SaaS risk management
- Has operated or improved security awareness, phishing, or role-specific training programs
- Can evaluate risk in the context of real-world workflows, users, business requirements, and operational constraints
Full description
The big picture: Axios is a media company dedicated to delivering trustworthy news and information with efficiency, clarity, and Smart Brevity. We are hiring an IT Security Specialist on our IT team to help protect the systems, devices, identities, applications, and workflows that power the company.
Why it matters: Security at Axios is not simply a matter of deploying tools or responding to vulnerabilities. It means understanding how systems are used, assessing whether they are fit for purpose, and identifying risk created by workflows, permissions, configurations, vendors, and user behavior.
This role will help de-risk current and future solutions by embedding security into technology decisions from evaluation and procurement through implementation, monitoring, and continuous improvement.
Go deeper: This role will own key areas of our corporate security environment, including endpoint security, identity and access management, Google Workspace, SaaS security, security monitoring, security awareness, and AI security. We’re looking for an experienced practitioner who understands that, in a modern company, the browser is often the operating system through which people access data, applications, and business workflows.In this role, you will:
- Own security for Axios’ Mac fleet, including Jamf, compliance, monitoring, alert investigation, malware response, and device remediation.
- Own Okta-based identity and access management, including adaptive MFA, authentication, SSO, application assignments, access scopes, and joiner/mover/leaver processes.
- Partner with People, Legal and Infrastructure to improve provisioning, offboarding, access removal, archival, legal holds, and lifecycle automation.
- Establish and maintain security configurations and risk controls for core services and SaaS applications, including authentication, access, collaboration, email security, data protection, alerting, activity monitoring, vendor and procurement reviews, security questionnaires, evidence gathering, and recommended safeguards.
- Treat the browser and SaaS layer as critical security boundaries, evaluating how users access data and applications and where browser-based workflows create risk.
- Use logs and activity monitoring across endpoints, browsers, identity systems, Google Workspace, and SaaS applications to investigate suspicious activity and support incident response.
- Assess systems, tools, permissions, and workflows for security, operational fit, and long-term supportability.
- Help protect high-risk users, including journalists and executives, through appropriate privacy, account-security, and personal-data protections.