The Role

We are currently seeking an IAM Analyst to join our growing Information Security & Risk team. The successful candidate will have the opportunity to help take Addepar’s Internal Identity & Access Management program to the next level. In this role, this person will work as part of the internal Identity & Access Management (IAM) function to improve the overall security posture of the organization.      

Addepar takes a market-based approach to pay. A successful candidate’s starting pay will be determined based on the role, job-related skills, experience, qualifications, work location, and market conditions.

The range displayed on each job posting reflects the minimum and maximum target base salary for roles in Colorado, California, and New York. The current range for this role is $113,000 - $176,000 (base salary) + bonus + equity + benefits.

Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Additionally, these ranges reflect the base salary only, and do not include bonus, equity, or benefits.

Applicants must be legally authorized to work in the United States for any employer without requiring current or future visa sponsorship (for example, employment-based visas such as H-1B, F-1/OPT, or similar), and must be authorized to begin work in the U.S. on their first day of employment.

What You’ll Do

• Provide operational support for IAM related administration tools
• Application onboarding and role definitions
• Recertification campaigns based on security and audit requirements
• Handling end user escalations and support requests
• Assist with improving the overall maturity of the internal IAM program
• Analyze, design, and implement improvements to data quality and role decisions across integrated systems
• Governance Initiatives, such as Entitlement Reviews and proper inventory management of identities
• Enhancing IAM posture including human and non-human identities
• Continually improve the IAM practice through platform enhancements, user process improvements and identity risk assessments
• Analyze access requirements, system flows, and security policies to enforce a strict Least Privilege access model while balancing user experience
• Design and implement scalable processes and/or technologies to improve the overall security posture of Addepar
• Assisting with the development and refinement of Information Security Policies & Standards
• Partner with the broader Security team to define the governance strategy and technical controls for Agentic AI Workflows, ensuring that autonomous agents and Non-Human Identities (NHIDs) operate within a secure, auditable, and least-privileged framework

Who You Are

• 3+ years of hands-on Identity & Access Management experience with a track record of solving diverse access challenges
• Bachelor’s degree/equivalent or higher. Computer Science or Engineering related education preferred
• Experience with Identity & Access Management tools
• Familiar with IT Governance and Compliance functions, including SOC2 and Data Governance
• An understanding of Non Human Identities (NHIs) and the unique challenges within an information security setting
• Attention to details and analytical skills
• Curious, always learning and deeply interested in Information Security
• Ability to build strong relationships and work collaboratively with internal and external partners
• Excellent verbal and written communication skills with the ability to build strong relationships with internal stakeholders and external partners

Desired Technical Skills:

• Hands-on experience with IGA tools such as Sailpoint, Saviynt, or similar enterprise-grade solutions
• Experience working with IAM related systems such as Identity Providers(IdP), Multi-Factor Authentication(MFA), Zero Trust Access(ZTA) and Privileged Access Management(PAM) platforms
• Familiarity with 'Source of Truth' integrations (e.g. Workday/BambooHR) for automated onboarding/offboarding
• Hands-on experience with Amazon Web Services (AWS) or similar cloud platform and strong understanding of IAM related policies and configurations
• Experience with Okta and Google Workspace environments
• Experience with Infrastructure as Code tools such as Terraform

The Role

We are currently seeking a Security Operations Analyst to join our Information & Risk Team! The SecOps Analyst will have the opportunity to help take Addepar’s Security and Risk Program to the next level, through insights based on our current state. In this role, this person will work as part of the Security Operations function to investigate security alerts, develop new monitoring strategies, and work with the wider business as part of our Vulnerability Management program. The candidate will also work to document and analyse existing critical operational processes, owners and controls, and help find opportunities to optimise those controls, increase security and reduce risk. The successful candidate will bring a strong process approach, with a preference for simple, achievable and repeatable solutions.    

Applicants must have legal authorization to work in the country where this role is based on the first day of employment. Visa sponsorship is not available for this position.

What You’ll Do

• Triage and respond to security alerts generated by our monitoring toolset, ensuring thorough investigation.
• Research and develop new monitoring strategies and build out analytics to improve our detection capabilities.
• Update or create new documentation for security tools, processes, playbooks, and procedures.
• Assist other areas of the business in effectively prioritizing and remediating vulnerabilities.
• Work closely with partners across Addepar teams, such as R&D, to evaluate critical processes, including the identification of key control points and owners.
• In partnership with Security and Risk Leadership, identify, document and track opportunities for process and control improvement.

Who You Are

• You have 4+ years of experience in Security Operations with a proven track record of investigating a variety of security alerts.
• You hold a Bachelor’s degree in Computer Science, Cyber Security, or a related field.
• Curious about information security with a desire to be a part of a fast-paced and supportive team who can help you learn on the job.
• Enjoys problem solving and finding simple solutions that bring multiple business benefits
• Strong communication skills and people skills - enjoys working with new people in different teams across the business but can also work independently
• Strong organisational skills and attention to detail
• Experience documenting simple and clear processes, runbooks, and process flows

Required Technical Skills:

• Proven experience with Sumo Logic, Splunk, or similar platforms (writing complex queries is a must).
• Direct experience performing security investigations
• Hands-on experience with Amazon Web Services (AWS) or similar cloud platform and strong understanding of implementing security best practices in the cloud. 
• Experience with Okta and Google Workspace environments will be highly desired.
• Experience with Infrastructure as Code tools such as Terraform.
  
  

  • Important Note: This role requires working from our Pune office 3 days a week (hybrid work model)

   

The Role

Join Addepar’s Application Security team as a Senior Application Security Engineer focused on embedding security deeply into our development lifecycle by building, automating, and maintaining security controls at scale. This role will also work on pushing AI initiatives forward and defining how our engineering teams securely implement AI, while simultaneously integrating wider workflows into our own security processes. If you are passionate about secure coding, automation and the frontier of AI security, we want you on our team.

Applicants must have, and maintain, the right to work in the United Kingdom from the first day of employment. Please note that visa sponsorship is not available for this role.

What You’ll Do

• You will design, implement, and enforce security guardrails and best practices for how other engineering teams utilise AI tools and features
• Oversee and optimize our security scanning ecosystem across all repositories, including SAST, SCA, and container security using GitHub Advanced Security, CodeQL, and similar tools
• Push our internal team’s capabilities forward by identifying where and how to integrate AI into our daily workflows to build smarter, more efficient security tools
• Maintain and refine our PR security review processes, managing blocking PRs and enhancing custom internal tooling that flags dangerous or high-risk code changes for security review
• Partner with engineering teams to deliver secure business outcomes and measure impact through coverage, prevention, and response metrics
• Participate in design reviews and security assessments, producing clear and actionable assessment reports

Who You Are

• You have experience in application security with hands-on integrating security into SDLC at scale
• You have a deep understanding and experience across GitHub CI/CD use and best practices
• You have extensive experience with Python, and a solid familiarity with Java and JavaScript
• You are curious and forward-thinking about the AI security landscape. While you don't need to be an AI expert, you are aware of how LLMs integrate with tools (Skills, MCPs, agents and identities), and keep up-to-date with security developments in the AI space
• You have sharp analytical and critical thinking skills, allowing you to dissect complex technical challenges and architect secure solutions. Being able to think outside the box is equally important as thinking inside the box
• Have clear written and verbal communication skills with the ability to influence across teams and mentor others
• You have a passion for continuous learning in a constantly evolving tech and security landscape
• Bachelor’s degree in CS/Engineering or equivalent practical experience