Security Engineer, Corporate Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Enhance the identity framework by implementing SSO coverage, deploying phishing-resistant MFA, automating SCIM lifecycle processes, and enforcing least-privilege access throughout the SaaS and cloud ecosystem.

• Develop detection mechanisms and safeguards against account takeover, MFA fatigue attacks, and session token theft.

• Create and deploy device policies as code, which includes configuration profiles, remediation scripts, and enforcement rules for macOS and Windows, ensuring staged rollouts and the ability to roll back.

• Sustain and enhance EDR detection and response capabilities across the entire fleet.

• Mitigate SaaS risks through the utilization of SSPM tools and automation, focusing on detecting risky OAuth grants, shadow IT, and configuration drifts.

• Manage the security configurations for SaaS applications such as Google Workspace and Slack, including integrations with AI agents and MCP.

• Automate processes for device provisioning, access reviews, and vendor security assessments.

• Author runbooks and documentation.

• Collaborate with IT and People teams to implement effective security controls.

• Take ownership of clearly defined projects from inception to completion, encompassing design and rollout.

⛳️ Requirements

• Generally 2–5 years of experience in corporate, enterprise, or IT security engineering.

• Practical experience with contemporary endpoint management and EDR tools (such as Jamf, Kandji, Intune, CrowdStrike, SentinelOne, or comparable solutions).

• Proficient understanding of identity protocols (including SAML, OIDC, SCIM) and familiarity with a significant identity provider (such as Okta, Entra, Google Workspace, or similar).

• Ability to write real code or scripts (in Python, Go, or similar languages).

• Strong and practical communication skills.

• Experience with SSPM tools and governance of OAuth grants.

• Exposure to DLP or insider risk management tools.

• Familiarity with infrastructure-as-code (Terraform) for managing security configurations.

• Insight on how agentic AI tools and MCP integrations impact corporate security monitoring.

• Desire to evolve into a broader role in corporate security or detection engineering over time.

🏝️ Benefits

• Bonus

• Equity

• Medical insurance

• Dental insurance

• Flexible time off

• Latest hardware and software

• Access to frontier AI models from day one