Senior Corporate Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Designing, developing, and managing technical security systems and controls to safeguard Charlie Health’s corporate environment.

• Collaborating closely with IT Engineering, Information Security, Compliance, Engineering, and business teams to mitigate risks, enhance control maturity, and support the growth of Charlie Health.

• Creating scalable security capabilities that protect sensitive data of the company, employees, clinicians, and patients while allowing the business to operate swiftly and securely.

• Ensuring the secure enterprise utilization of AI tools, LLM platforms, AI-driven workflows, and innovative AI security products.

• Supporting security controls in accordance with HIPAA, SOC 2, NIST, Zero Trust principles, and other relevant regulatory and contractual obligations.

⛳️ Requirements

• Over 5 years of experience in security engineering, corporate security, infrastructure security, enterprise security, IT security, cloud security, or a similar technical field.

• Extensive hands-on experience in designing, developing, and managing technical security controls in enterprise settings.

• Experience in securing identities, endpoints, SaaS platforms, collaboration tools, cloud-connected services, and internal systems.

• Strong knowledge of identity and access management principles, including MFA, conditional access, privileged access, lifecycle automation, service accounts, and least privilege.

• Familiarity with security tools such as MDR platforms, EDR, SIEM, cloud security tools, endpoint management tools, vulnerability management tools, or DLP systems.

• Experience with security platforms and telemetry sources like Expel MDR, SentinelOne, Wiz, CloudTrail, Sumo Logic, or similar solutions.

• Proficiency in endpoint security, MDM, secure configuration management, and vulnerability remediation across Mac, Windows, or mobile environments.

• Competence in using scripting, APIs, or automation tools such as Python, Bash, PowerShell, Workato, Terraform, REST APIs, webhooks, or JSON.

• Familiarity with detection engineering, alert tuning, incident response workflows, and security operations processes.

• Strong understanding of Zero Trust principles, identity-centric security, least privilege, device trust, and secure system design.

• Ability to collaborate across IT, Security, Engineering, Compliance, and business stakeholders.

• Excellent documentation, ownership, judgment, and capability to work independently in uncertain environments.

🏝️ Benefits

• Comprehensive benefits for all full-time employees.