Justworks
Justworks is a cloud-based software platform that takes the busyness out of growing a business and alleviates the unknown. We've combined a simple platform and exceptional 24/7 customer service to help entrepreneurs and businesses grow with confidence by giving them access to corporate-level benefits, automated payroll, HR tools, and compliance support— all in one place.
We're building a world in which starting, running, and joining a growing business is an accessible option for all. If you want to work in an entrepreneurial environment, build something meaningful, and have fun while doing it, join us.
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
Senior Security Engineer (Detection & Response)
Share this job
Who We Are
At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people.
We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you.
We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team.
If this sounds like you, you’ll fit right in.
Who You Are
Justworks is looking for an experienced security engineer skilled in detection and response, who can help enhance and mature Justworks’ Security. As a Senior Detection Engineer, you’ll design, build, and maintain the detection logic that powers our platform, conduct proactive threat hunting, and drive continuous improvements across our detection and incident handling workflows. You’ll collaborate closely with IT, Engineering, Platform, and other members of the Security team to identify attacker behaviors, build high‑fidelity detections, and strengthen our defenses.
You’ll also play a key role in designing and conducting table‑top exercises, improving processes, and building automation that reduces friction and accelerates response. You’ll help explore how AI can enhance detection, hunting, and operational efficiency.
Your Success Profile
What You Will Work On
- Build, tune, and deploy high‑quality detections across our platform
- Develop and refine detections using telemetry from EDR, threat intel, endpoint & cloud posture platforms and native AWS cloud services
- Conduct proactive threat hunting to uncover threat actor behaviors and detection gaps
- Lead security event & incident handling, including triage, investigation, containment guidance, and post‑incident improvements
- Build automation and tooling to reduce manual effort and improve detection accuracy
- Drive process improvements across detection engineering, incident response, and telemetry workflows
- Collaborate with Engineering to ensure high‑quality logging and visibility across AWS environments
- Explore and prototype AI‑assisted detection and response capabilities
- Contribute to internal playbooks, documentation, and detection engineering best practices
- Design and conduct table‑top exercises to validate readiness and strengthen response processes
- Note: This position will require participation in an on-call rotation.
How You Will Do Your Work
As a Sr. Detection Engineer, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:
- Good judgement - the exercise of critical thinking, analyzing and assessing problems and implications, identifying patterns, making connections of underlying issues, understanding risks and developing mitigation strategies, and taking ownership of the outcome.
- Resourcefulness - taking a can-do approach, even in the face of obstacles and constraints by assessing what’s in front of you and effectively and efficiently optimizing what you have, whether it's working on something new or thinking about how to do something better.
- Teamwork and communication - putting our collective best together through documentation, collaboration, relationship-building, listening, empathy, recruiting, and evangelism.
- Influence and leadership - fostering a community of knowledge-sharing, collaboration, mentorship, and forward-thinking.
- Skills and knowledge - the capacity to actively learn and apply specific domain knowledge, know-how, and best practices to continually enhance and improve.
In addition, all Justworkers focus on aligning their behaviors to our core values known as COGIS. It stands for:
- Camaraderie - Day to day you can be seen working together toward a higher purpose. You like to have fun. You’re an active listener, treat people respectfully, and have a strong desire to know and help others.
- Openness - Your default is to be open. You're willing to share information, understand other perspectives, and consider new possibilities. You’re curious, ask open questions, and are receptive to thoughts and feedback from others.
- Grit - You demonstrate grit by having the courage to commit and persevere. You’re committed, earnest, and dive in to get the job done well with a positive attitude.
- Integrity - Simply put, do what you say and say what you'll do. You’re honest and forthright, have a strong moral compass, and strive to match your words with your actions while leading by example.
- Simplicity - Be like Einstein: “Everything should be made as simple as possible, but no simpler.”
Qualifications
- 5+ years of hands-on experience in detection engineering, threat hunting, security event analysis, and incident response
- Strong understanding of attacker behaviors, malware techniques, and modern threat landscapes
- Hands‑on experience with EDR platforms (event analysis, detections, hunting)
- Proficiency with AWS security and logging services (CloudTrail, GuardDuty, IAM, VPC Flow Logs, Lambda, etc.)
- Experience designing and conducting attack & defend (table‑top) exercises
- Demonstrated ability to improve processes, reduce friction, and automate repetitive tasks
- Interest in how AI/ML can enhance detection, hunting, and response workflows
- Strong communication skills and comfort working cross‑functionally in a fast‑paced environment
This role is based in our New York City headquarters. The base wage range for this position will be $167,500 - $235,000 annually.
#LI-SD1 #LI-Hybrid
Actual compensation is based on multiple factors that are unique to each candidate, including and not limited to skill set, level of relevant experience, and specific work location. Salary ranges for positions based in other locations may differ based on the cost of labor in that location.
For more information about Justworks’ Total Reward Philosophy, including all of the perks and benefits we are proud to offer our team members, please visit Total Rewards @ Justworks.
Diversity At Justworks
Justworks is committed to maintaining a workplace where diversity of identity, culture, and life experience is the norm and is celebrated authentically and respected consistently. Diversity in our work, our people, and our product drives creativity and innovation, entrepreneurial leadership and integrity, competitiveness, and collaboration throughout our business and in the market. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our customers.
We’re proud to be an equal opportunity employer open to all qualified applicants regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital or familial status, disability, pregnancy, gender identity or expression, veteran status, genetic information, or any other legally protected status. Justworks is fully dedicated to providing necessary support to candidates with disabilities who may require reasonable accommodations. We also provide reasonable accommodations to employees based on their sincerely held religious beliefs, as well as for other covered reasons consistent with applicable federal, state, and local laws. If you're in need of a reasonable accommodation, please reach out to us at accommodations@justworks.com. Your comfort and success matter to us, and we're here to ensure an inclusive experience.
Ready to apply?
Apply to Justworks
Who We Are
At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people.
We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you.
We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team.
If this sounds like you, you’ll fit right in.
Who You Are
Justworks is looking for an experienced Identity and Access Management (IAM) analyst who can help enhance Justworks’s IAM program and maturity. As a successful candidate, you have demonstrated experience working with business to define and implement roles, rules, permissions and accesses, and working with IAM engineers to build adequate security solutions to improve identity and access management. You have a deep understanding of the fundamentals of identity and access management concepts and risks, and have worked with multiple IAM tools such as IGA, PAM, SSO and others. You also should have experience on AWS and its IAM roles.
Your Success Profile
What You Will Work On
- Business collaboration and requirements analysis
- Partner with business stakeholders to analyze and define role-based access control (RBAC) requirements and permission models
- Conduct access reviews and collaborate with business units to establish appropriate access levels and segregation of duties
- Translate business requirements into technical IAM specifications and access policies
- Facilitate workshops and requirements gathering sessions with cross-functional teams
- Assist IAM Implementation
- Support IAM leadership and engineers to execute IAM roadmaps.
- Design and document access control matrices, role hierarchies, and permission structures
- Assist in the deployment and configuration of identity management solutions across enterprise systems
- Coordinate with technical teams to ensure proper integration of IAM systems with business applications
- Process Improvement
- Continuously evaluate and improve IAM processes, workflows, and user experiences
- Create and maintain comprehensive documentation for IAM processes, procedures, and system configurations
- Develop training materials and provide guidance to end users and business stakeholders
- Analyze access patterns and recommend optimization opportunities
- Support Security Management and Risk Management
- Help developing, maintaining, and enforcing IAM policies, standards, and procedures.
- Assess and document access-related risks and recommend appropriate mitigation strategies
- Investigate and resolve access-related security incidents and policy violations
- Support privilege access management (PAM) initiatives and monitor high-privilege account usage
- Help Cyber Defense Operations triage incidents as need especially related to IAM
- Work with Internal Audit, IT, and Digital Security to address access review gaps and ensure compliance with security policies and regulatory requirements.
- Perform other related duties as assigned.
How You Will Do Your Work
As a Senior IAM Analyst, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:
- Good judgement - the exercise of critical thinking, analyzing and assessing problems and implications, identifying patterns, making connections of underlying issues, understanding risks and developing mitigation strategies, and taking ownership of the outcome.
- Resourcefulness - taking a can-do approach, even in the face of obstacles and constraints by assessing what’s in front of you and effectively and efficiently optimizing what you have, whether it's working on something new or thinking about how to do something better.
- Teamwork and communication - putting our collective best together through documentation, collaboration, relationship-building, listening, empathy, recruiting, and evangelism.
- Influence and leadership - fostering a community of knowledge-sharing, collaboration, mentorship, and forward-thinking.
- Skills and knowledge - the capacity to actively learn and apply specific domain knowledge, know-how, and best practices to continually enhance and improve.
In addition, all Justworkers focus on aligning their behaviors to our core values known as COGIS. It stands for:
- Camaraderie - Day to day you can be seen working together toward a higher purpose. You like to have fun. You’re an active listener, treat people respectfully, and have a strong desire to know and help others.
- Openness - Your default is to be open. You're willing to share information, understand other perspectives, and consider new possibilities. You’re curious, ask open questions, and are receptive to thoughts and feedback from others.
- Grit - You demonstrate grit by having the courage to commit and persevere. You’re committed, earnest, and dive in to get the job done well with a positive attitude.
- Integrity - Simply put, do what you say and say what you'll do. You’re honest and forthright, have a strong moral compass, and strive to match your words with your actions while leading by example.
- Simplicity - Be like Einstein: “Everything should be made as simple as possible, but no simpler.”
Qualifications
- Experiences
- 5+ years of hands-on experience in identity and access management, preferably in technology companies or enterprise environments
- 3+ years of experience with RBAC design, implementation, and management
- Extensive experience in the framework and process to define roles and permissions in IGA or RBAC implementations
- Proven experience working with business stakeholders to gather requirements and translate them into access control specifications
- Solid experience with IAM tools and platforms (e.g., AD, Okta, SailPoint, ForgeRock, CyberArk, or similar)
- Demonstrated experience conducting access reviews, certifications, and compliance audits
- Technical
- Strong understanding of identity and access management concepts, protocols, and standards (SAML, OAuth, OpenID Connect, LDAP)
- Proficiency with directory services and identity providers
- Knowledge of privileged access management (PAM) concepts and tools
- Understanding of segregation of duties (SoD) principles and risk-based access controls
- Familiarity with compliance frameworks (SOX, PCI-DSS, HIPAA, etc.)
- Communication and Collaboration
- Exceptional written and verbal communication skills with ability to explain technical concepts to non-technical stakeholders
- Proven ability to work collaboratively across diverse teams and organizational levels
- Experience facilitating meetings, workshops, and training sessions
- Strong customer service orientation and stakeholder management skills
- Strong analytical and organizational skills
- Preferred Qualifications
- Bachelor's degree in Information Technology, Computer Science, or related field
- Industry certifications such as CISSP, CISA, CISM, or vendor-specific IAM certifications
- Experience with cloud IAM platforms (AWS IAM, Azure AD, Google Cloud IAM)
- Knowledge of zero trust architecture and modern identity security concepts
- Experience with automated provisioning and deprovisioning workflows
- Familiarity with IT service management (ITSM) tools and processes
The base wage range for this position based in our New York City Office is targeted at $167,500 - $235,000 per year.
#LI-Hybrid #LI-SD1
Actual compensation is based on multiple factors that are unique to each candidate, including and not limited to skill set, level of relevant experience, and specific work location. Salary ranges for positions based in other locations may differ based on the cost of labor in that location.
For more information about Justworks’ Total Reward Philosophy, including all of the perks and benefits we are proud to offer our team members, please visit Total Rewards @ Justworks.
Diversity At Justworks
Justworks is committed to maintaining a workplace where diversity of identity, culture, and life experience is the norm and is celebrated authentically and respected consistently. Diversity in our work, our people, and our product drives creativity and innovation, entrepreneurial leadership and integrity, competitiveness, and collaboration throughout our business and in the market. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our customers.
We’re proud to be an equal opportunity employer open to all qualified applicants regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital or familial status, disability, pregnancy, gender identity or expression, veteran status, genetic information, or any other legally protected status. Justworks is fully dedicated to providing necessary support to candidates with disabilities who may require reasonable accommodations. We also provide reasonable accommodations to employees based on their sincerely held religious beliefs, as well as for other covered reasons consistent with applicable federal, state, and local laws. If you're in need of a reasonable accommodation, please reach out to us at accommodations@justworks.com. Your comfort and success matter to us, and we're here to ensure an inclusive experience.
Ready to apply?
Apply to Justworks
Who We Are
At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people.
We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you.
We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team.
If this sounds like you, you’ll fit right in.
Who You Are
Justworks is looking for an experienced, hands-on Senior Security Engineer specializing in AI who will drive and execute the company’s AI strategy and Digital Security’s objectives. Our ideal candidate has extensive experience building and enhancing security solutions of AI systems that defends against unique AI threats. You have hands-on experience evaluating the security of software systems containing AI features and have designed guardrails to protect our data against AI specific threats. You also have a deep understanding of the fundamentals of computing and development/coding with Ruby on Rails, JavaScript and/or other languages. An ideal candidate should also have experience in *Nix environment and the use of common cybersecurity tools.
Your Success Profile
What You Will Work On
- Research AI treads, AI threat landscape, AI vulnerabilities and remediations and AI security control advancement.
- Evaluate and assess AI tools and play a critical role in AI system management and governance
- Evaluate existing AI security controls and identify opportunities to enhance the security posture and software designs
- Collaborate with other security engineers to bring adequate security capabilities to Justworks.
- Provide technical and architectural guidance on AI to product managers, product engineers, and corporate IT on digital security.
- Work with the team to execute and deliver on our AI roadmap. This will include but won’t be limited to implementing AI security capabilities in AWS and for corporate.
- Develop AI security architecture and design standards across Justworks applications and infrastructure to promote a standardized set of security requirements, aligning with internal policies.
- Participates in AI R&D projects and major new AI development initiatives to ensure that appropriate security controls are built into systems prior to production cutover.
- Drive process improvement and control implementation projects in coordination with the larger Digital Technology team at Justworks.
- Act as a cross-functional tools and services expert, working with engineering and risk teams to build AI security control requirements
- Help Cyber Defense Operations triage incidents as needed especially related to AI security within company internal networks as well as in our production environments in AWS.
- Be the champion for AI implementation within Digital Security, assisting various teams to implement AI models to bring effectiveness and efficiency into security controls, security operations and risk management
How You Will Do Your Work
As a Senior Security Engineer, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:
- Good judgement - the exercise of critical thinking, analyzing and assessing problems and implications, identifying patterns, making connections of underlying issues, understanding risks and developing mitigation strategies, and taking ownership of the outcome.
- Resourcefulness - taking a can-do approach, even in the face of obstacles and constraints by assessing what’s in front of you and effectively and efficiently optimizing what you have, whether it's working on something new or thinking about how to do something better.
- Teamwork and communication - putting our collective best together through documentation, collaboration, relationship-building, listening, empathy, recruiting, and evangelism.
- Influence and leadership - fostering a community of knowledge-sharing, collaboration, mentorship, and forward-thinking.
- Skills and knowledge - the capacity to actively learn and apply specific domain knowledge, know-how, and best practices to continually enhance and improve.
In addition, all Justworkers focus on aligning their behaviors to our core values known as COGIS. It stands for:
- Camaraderie - Day to day you can be seen working together toward a higher purpose. You like to have fun. You’re an active listener, treat people respectfully, and have a strong desire to know and help others.
- Openness - Your default is to be open. You're willing to share information, understand other perspectives, and consider new possibilities. You’re curious, ask open questions, and are receptive to thoughts and feedback from others.
- Grit - You demonstrate grit by having the courage to commit and persevere. You’re committed, earnest, and dive in to get the job done well with a positive attitude.
- Integrity - Simply put, do what you say and say what you'll do. You’re honest and forthright, have a strong moral compass, and strive to match your words with your actions while leading by example.
- Simplicity - Be like Einstein: “Everything should be made as simple as possible, but no simpler.”
Qualifications
- 5+ years experience in information security concepts, common technical security controls, and security architecture design principles, ideally in a SaaS environment
- At least 2+ years of hands-on experience in securing AI systems, evaluating AI threats and implementing AI security controls.
- Background as a software engineer, security architect, or security engineer with experience implementing security controls in AI environments in AWS.
- Experience in setting up and deploying AI engineering tools like vector databases, AI model hosting and monitoring tools and in driving security best practices with AI coding assistants (like Claude Code, Cursor, etc.).
- Solid experience with Secure-SDLC processes and DevSecOps, including secure design, threat modeling, vulnerability management, etc.
- Experience in monitoring AI systems for security threats and vulnerabilities.
- Knowledge of AI/ML technologies, frameworks and platforms.
- Knowledge of regulations and industry best practices related to AI security and data privacy.
- Familiar with secure coding practices and security scanning technologies
- Extensive experience in security architecture, system design, and engineering scalable security solutions in a cloud-native (AWS) environment
- Experience with scripting and automation using languages such as Python, Ruby or Javascript.
- Proven track record as a strong communicator
- Strong analytical skills
- Exceptional organizational skills
Technologies used
- Go, Ruby on Rails, Javascript
- AI frameworks like Langchain/LangGraph, AI hosting platforms, AI coding assistants (both open source and commercial) and emerging protocol standards like MCP and Agent-to-Agent Protocol.
- Technical experience with DevOps, Jira, and other agile automation tools
- Ruby on Rails & Javascript
- (Preferred) Security Certifications: CISSP, CISM, CRISC, GIAC, CCSP or CEH
The base wage range for this position based in our New York City Office is targeted at $167,500.00 to $226,300.00 per year.
#LI-Hybrid #LI-CE1
Actual compensation is based on multiple factors that are unique to each candidate, including and not limited to skill set, level of relevant experience, and specific work location. Salary ranges for positions based in other locations may differ based on the cost of labor in that location.
For more information about Justworks’ Total Reward Philosophy, including all of the perks and benefits we are proud to offer our team members, please visit Total Rewards @ Justworks.
Diversity At Justworks
Justworks is committed to maintaining a workplace where diversity of identity, culture, and life experience is the norm and is celebrated authentically and respected consistently. Diversity in our work, our people, and our product drives creativity and innovation, entrepreneurial leadership and integrity, competitiveness, and collaboration throughout our business and in the market. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our customers.
We’re proud to be an equal opportunity employer open to all qualified applicants regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital or familial status, disability, pregnancy, gender identity or expression, veteran status, genetic information, or any other legally protected status. Justworks is fully dedicated to providing necessary support to candidates with disabilities who may require reasonable accommodations. We also provide reasonable accommodations to employees based on their sincerely held religious beliefs, as well as for other covered reasons consistent with applicable federal, state, and local laws. If you're in need of a reasonable accommodation, please reach out to us at accommodations@justworks.com. Your comfort and success matter to us, and we're here to ensure an inclusive experience.
Ready to apply?
Apply to Justworks