Senior Malware Reverse Engineer Jobs in Berkeley, CA

Job Description: **To be considered for this position, candidates must be legally authorized to work in the United States on a full-time basis without the need for employer sponsorship now or in the future. SavvyMoney is a leading San Francisco East Bay fintech company. We provide integrated credit score and personal finance solutions to 1,600 + bank and credit union partners nationally. The SavvyMoney solutions integrate with more than 43 digital banking platforms. SavvyMoney was recently recognized by the San Francisco Business Times and the Silicon Valley Journal as one of the "Top 25 Places to Work in the San Francisco Bay Area" and is an Inc. 5000 Fastest Growing Company. Reporting to the Senior Manager, IT Operations, the Senior IT Operations Engineer owns three connected domains: endpoint and workplace engineering across the Windows and macOS fleets, IT security operations and SOC 2 compliance support including physical access control, and forward-deployed technical support for partner inquiries alongside AV and media production for live and hybrid events. This is a senior individual-contributor role. You are the final escalation point for endpoint and workplace issues; you set the standards the rest of IT follows, and you operate across all three domains with minimal direction. SavvyMoney is a financial services company operating under FCRA, GLBA, and SOC 2, so every system you touch carries a compliance obligation. When the three domains compete for your time, the priority order is: active security incident, then partner-impacting escalation, then scheduled live event, then routine endpoint work. Key ResponsibilitiesPillar 1: Endpoint & Workplace Engineering (Windows + macOS) Own the Windows fleet end to end: Intune and Entra ID enrollment, Autopilot provisioning, configuration and compliance policies, Windows Update rings, BitLocker, and Defender for Endpoint. Own the macOS fleet end to end: Kandji, zero-touch Automated Device Enrollment, Blueprints, Platform SSO, FileVault key escrow, Gatekeeper and XProtect posture, and the macOS major-version upgrade cadence. Maintain parity between the two platforms: one security baseline, one patch SLA, one app catalog, one onboarding experience, and one experience whether the user is on a PC or a Mac. Support the light Linux endpoint footprint used by engineering, including baseline hardening, patching, and disk encryption. Package, test, and deploy software to both fleets, and maintain a self-service app catalog. Serve as the highest escalation tier for endpoint issues: the person who resolves what the service desk cannot. Own IT asset lifecycle from procurement through certified data destruction, including BYOD enrollment and same-day offboarding wipe. Automate endpoint operations with PowerShell, Bash, and Python against MDM and identity APIs. Eliminate manual repetition rather than documenting it. Provide white-glove, hands-on support to employees and executive staff across all platforms.Pillar 2: Security Operations, Compliance & Physical Security Administer identity and access management in Okta: SSO, SCIM provisioning, phishing-resistant MFA, application assignment, lifecycle automation, and access-review evidence. Deploy and administer the enterprise system estate, including Google Workspace, Microsoft 365, AWS, Jira, and Confluence. Own IT onboarding and offboarding end to end: account provisioning, group membership, device assignment, badge issuance, and same-day revocation of all access on departure. Enforce least privilege across all enterprise systems. Run periodic access reviews and remove standing privilege. Triage and respond to endpoint and identity security alerts including phishing, malware, and suspected account compromise, escalating to Information Security per the incident response plan. Own the IT portion of SOC 2: evidence collection, control testing, change and ticket records, and audit walkthroughs for endpoint, identity, and physical security controls. Maintain documentation for security controls, policies, and procedures mapped to SOC 2, and keep control ownership current. Maintain corporate network security controls: VPN and ZTNA access, 802.1X, firewall rules, DNS filtering, and network segmentation for guest and IoT devices. Operate building security systems: electronic door locks, access control, video surveillance, badge management, visitor tracking, and camera retention aligned to policy. Provision and revoke physical access in lockstep with logical access: same trigger, same day. Handle consumer and partner data only in approved systems, and escalate any suspected exposure immediately.Pillar 3: Forward-Deployed Partner Support & AV / Media Production Forward-Deployed Partner Support Act as the embedded technical resource for partner inquiries, working directly alongside Partner Success, Support, and Implementation to triage, reproduce, and resolve inbound technical questions from our bank and credit union partners. Turn partner-reported symptoms into reproducible technical findings, and hand off to Engineering with logs, environment detail, and a clear reproduction path. Join partner calls as the technical voice: explain root cause, remediation, and timeline in language a non-technical partner stakeholder can act on. Own the issue to closure and confirm resolution with the partner rather than handing it off and moving on. Build internal troubleshooting runbooks and partner-facing FAQ content from recurring inquiries, and push for the fixes that eliminate repeat tickets. Work partner and consumer data strictly within approved systems under GLBA and FCRA obligations. This role does not make or automate credit, lending, or eligibility decisions. AV & Media Production Design and configure AV systems, including conference rooms, digital signage, and live event production setups. Support and optimize video conferencing solutions (Zoom, Microsoft Teams, Webex) for hybrid meetings. Operate and maintain professional camera equipment, lighting, and audio systems. Oversee post-production workflows, including video editing (Adobe Premiere, DaVinci Resolve) and podcast production (Audition, Audacity, Pro Tools). Manage cloud-based media storage and develop AV standards for consistency and quality. Integrate AI-driven enhancements to automate media processing and enable real-time captioning. Live Event Support Provide real-time IT and AV support for corporate meetings, webinars, and hybrid events. Troubleshoot and resolve AV and IT issues during live productions and critical operations. Ensure high-quality streaming and broadcasting for executive presentations and company-wide events.Shared Foundation IT Service Management Manage IT ticketing systems and service desk operations for timely issue resolution. Own and maintain SLAs for IT support and infrastructure services, and hold the function to them. Track and report on IT service metrics including ticket resolution times, system uptime, and user satisfaction. Apply ITIL practices for incident, problem, and change management. Participate in the technical support on-call rotation, including after-hours coverage for outages, security events, and live productions. Facilities & Physical Infrastructure Manage environmental monitoring for server rooms and network closets, including temperature, humidity, and power. Coordinate with facilities vendors on IT infrastructure such as structured cabling, power, and HVAC. Maintain UPS systems, backup power, and critical infrastructure. Manage physical IT infrastructure, including server racks, cable management, and network distribution. Documentation, Training & Operational Excellence Create and maintain IT documentation, including system diagrams, runbooks, SOPs, and knowledge base articles. Develop and deliver Lunch & Learn sessions on IT tools, security best practices, and new technologies. Build automation that eliminates repetitive tasks, and document what you build so others can run it. Set technical standards for the IT function and mentor junior IT staff on endpoint, identity, and security practice. Project Management & Coordination Lead IT projects including system implementations, infrastructure upgrades, and technology rollouts. Develop project plans with timelines, task dependencies, resource requirements, and risk mitigation strategies. Track project progress using project management tools (Jira, Asana) and provide regular status updates. Manage project documentation, including requirements, design specifications, test plans, and deployment guides. Coordinate user acceptance testing and training for new systems. Manage vendor deliverables and timelines for externally-managed projects. Required Skills and Qualifications 7+ years of experience in IT systems engineering, enterprise IT support, cloud administration, or AV systems design. Genuine dual-platform depth: at least three years managing a macOS fleet at scale with MDM (Kandji, Jamf, or Mosyle) and at least three years managing a Windows fleet with Intune and Entra ID. Deep experience in one platform with passing familiarity in the other is not sufficient for this role. Hands-on Okta administration experience rather than end-user familiarity: SSO, SCIM provisioning, MFA policy, and lifecycle automation. Proficiency in enterprise IT tools, including Google Workspace, Microsoft 365, Jira, Confluence, AWS, Kandji, Intune, and PagerDuty. Experience with network administration and security best practices, including VPNs, firewall configuration, and endpoint security. Experience managing building security technologies, including access control systems and video surveillance. Participation in a full SOC 2 audit cycle as a control owner or evidence provider. Demonstrated experience in an externally-facing technical role such as support engineering, solutions engineering, forward-deployed engineering, or implementation, with the ability to hold a technical conversation with a partner or customer stakeholder. Working proficiency in automation and scripting with PowerShell, Bash, and Python. Experience with video production, camera operation, and editing (Adobe Premiere, Final Cut Pro, DaVinci Resolve). Proficiency in podcast production, including multi-track audio editing and publishing. Understanding of video conferencing platforms and live streaming technologies (OBS, vMix, Wirecast, ATEM Mini). Experience setting technical standards and mentoring junior IT staff. Strong problem-solving and analytical skills with the ability to exercise discretion and independent judgment. Excellent communication and collaboration skills for cross-functional projects. Preferred Experience Fintech, lending, or financial services background, or other regulated-industry experience with FCRA, GLBA, or SOC 2 obligations. Experience supporting a light Linux endpoint footprint. Experience with Zero Trust network access and device-posture-based conditional access. Relevant certifications such as Okta Certified Administrator, Microsoft 365 Certified Endpoint Administrator Associate, Apple Certified Support Professional, CompTIA Security+, or ITIL Foundation. Bachelor's degree in a relevant field, or compelling self-taught equivalent. What You'll Be Measured On Endpoint fleet compliance: percentage of Windows and macOS devices meeting the security baseline and the patch SLA. IT support responsiveness: time to resolve by severity against the published SLAs. SOC 2 readiness: IT-owned controls with current evidence at the time of audit request, and zero audit findings attributable to those controls. Partner inquiry cycle time: time from inbound technical question to confirmed resolution, and the reduction in repeat inquiries. Live event reliability: executive presentations and company-wide events delivered without AV or IT disruption. Onboarding and offboarding accuracy: access fully provisioned on day one and fully revoked on departure day, logical and physical. Location, On-Call & Requirements Onsite: minimum three days per week at our Dublin, CA office, with four to five days strongly preferred. AV, building security, and network closet work cannot be performed remotely. Travel: approximately 5% for conferences. No travel to partner sites. On-call: participation in the technical support on-call rotation, with after-hours availability for outages, security events, live events, and executive presentations. Background check required, standard for regulated financial services. Base Salary The annual base salary for this position is between $115,000.00 and $135,00000 depending upon experience. Additionally we provide Equity Compensation Package Flexible Time Off (FTO) - take time off as needed to rest and recharge. Medical, Dental, Vision – 100% premium paid for employee Disability/Life Insurance Opportunity for learning and career growth with a top Bay Area technology company Reimbursement for remote work setup Monthly stipend for phone and internet Team building events, culture activities, all hands events Paid time off to volunteer and serve the community Half day Fridays 401k matching contribution Beautiful California East Bay offices in Dublin, CA SavvyMoney’s EEO Statement SavvyMoney relies on diversity of culture and thought to deliver on our goal of Creative People, Practical solutions serving our client needs, and ensures nondiscrimination in all programs and activities. We continuously seek talented, qualified employees in our operations regardless of race, color, sex/gender, including gender identity and expression, sexual orientation, pregnancy, national origin, religion, disability, age, marital status, citizen status, protected veteran status, or any other protected classification under country or local law. SavvyMoney is proud to be an Equal Employment Opportunity/ Affirmative Action Employer. We are committed to protecting your data. To learn more, please review theSavvyMoney Employee Privacy Policy Notice here