IT Security Administrator

IT Security Administrator

Bitwarden is the trusted identity security leader for millions of users worldwide, empowering enterprises, developers, and individuals to securely manage and share sensitive information anywhere. Bitwarden makes it easy for all users to extend robust security across their devices with password management, secrets management, and passwordless and passkey innovations. The company is headquartered in Santa Barbara, California with team members located across the globe. Learn more at bitwarden.com. 

Bitwarden promotes better internet security and safety with the leading open source password management solution for individuals, teams, and business organizations. Our philosophy about security is that “we are all in this together” – and so we continue to offer a full-featured free version of Bitwarden so that everyone can be protected with strong password management. At the same time, we provide enterprise-grade solutions to some of the largest companies in the world, and will continue to innovate in the identity and authentication market as the world starts to grow beyond passwords. Read more on the Bitwarden blog. 

As we establish our India Engineering Center of Excellence (COE), we are looking for an experienced IT Security Administrator at Bitwarden, you will be responsible for a wide range of tasks, including the day-to-day administration of IT tools, cybersecurity tools and devices, as well as providing first-tier and second-tier support for our security operations center (SoC) and our security information and event management (SIEM). This is a hands-on role that requires a high level of technical expertise across a broad range of technologies and services. Additional responsibilities include the security administration of a wide variety of IT systems across the enterprise, including endpoint devices, in addition to providing support for our various assessment and audit related projects.

The IT & Security Administrator will be involved in our security and IT roadmap discussions and planning, and will be responsible for creating and responding to new and existing security and IT work requests that are on our related work ticket boards.  

The Security and IT team are very active, we work with all teams across the organization every single day. This role reports directly to the Head of Information Security.

This is an all-remote team and we’re looking for someone located in the U.S. We do not offer visa sponsorship at this time.

• →Strong 4-6 years experience as an IT Security Administrator within a software engineering organization. 
• →Assist with Security and IT related Technical Service Desk tickets
• →First touch point for user support (investigation/resolution, referral to TSD/Senior team member, etc)
• →Assist with access control changes, onboarding automation SCIM, and user provisioning / deprovisioning.
• →Strong hands-on expertise with configuring and administering/ maintaining Atlassian cloud products (JIRA, Service Management, Confluence, etc).
• →Security and IT administrative tasks related to auditing, access management, and licensing users across various departments.
• →Responds to, and where appropriate, resolves or escalates security incidents and investigations. 
• →Assist Security and IT and other divisions with ensuring the secure and ethical implementation and operation of AI systems and data within the organization.
• →Investigates, monitors and reviews SOC and SIEM alerts and network traffic for unusual or suspicious activity or security events, and investigates these as a first level responder. Provides escalations to tier 2 and tier 3 SOC team as needed to assist with investigation of security events.
• →Monitor and investigate Zscaler Internet Access (ZIA) DLP alerts to identify potential data leakage and policy violations.
• →Monitor BolsterAI to identify phishing websites, malicious domains, and brand impersonation attempts. 
• →Assist with developing and maintaining documentation for security systems, services and procedures to support Bitwarden’s security, compliance needs and certification requirements such as ISO 27001, SOC2, HIPAA, and GDPR.
• →Administer and maintain endpoint protection and overall security and data protection utilizing various technologies such as Endpoint Detection and Response (EDR), Mobile Device Management (MDM), Secure Access Service Edge (SASE), Data Loss Prevention (DLP), DarkOps and Brand protection service, and other security solutions. 
• →Establish and document standardized processes for managing security and IT services and establish secure/hardened system configuration baselines.  Document related IT process and procedures.
• →Assist with patching and updating and overall vulnerability management to keep all systems and endpoint devices secure and operational with minimal downtime.  This includes Endpoint/ Asset standardization and maintaining OS and system updates/ patches, leveraging policy enforcements that are managed via our MDM

• A Security and IT generalist that has prior experience working in environments with diverse technologies and can dive deep on domain expertise.  
• Experience managing equipment and software across a distributed, remote, and decentralized global workforce
• Ability to maintain discretion, handle sensitive information and maintain security best-practices
• Interested in solving security and IT challenges through technical awareness, assurance, and partnership
• Security technocrat at heart, staying current with trends and new technologies
• Familiarity with security standards and regulations relevant to AI and data privacy
• Collaborative and adaptable mindset
• Openness and authenticity combined with excellent communication skills
• Excitement and enthusiasm for open source and for better internet security 
• Excellent problem-solving skills – you might not know all the answers but you know how to find and communicate the solutions

• User of Bitwarden
• Experience in the SecOps world and ability to apply security best practices across the organization
• Experience with various MDM solutions
• Azure/AWS management experience

We are committed to fostering an inclusive workplace where everyone can do their best work. We welcome applicants from all backgrounds and make employment decisions based on skills, experience, qualifications, and business needs.