Senior IT Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and oversee Corporate IT Security encompassing identity management, devices, endpoints, internal networks, workforce SaaS, and AI tools.

• Safeguard the employee environment while ensuring the security of sensitive healthcare information.

• Act as Incident Commander for corporate-environment incidents within the company's incident response framework.

• Collaborate with Legal, Compliance, and business leaders on security-related issues.

• Engage in hands-on configuration, scripting, investigation, and remediation, which constitutes at least 70% of the role.

• Evaluate corporate identity, devices, and SaaS to develop a prioritized remediation backlog.

• Deploy phishing-resistant MFA, enforce SSO, establish session and sign-on policies, implement least-privilege admin roles, and manage service-account governance.

• Ensure device trust and conditional access for macOS and Windows environments utilizing MDM and EDR.

• Oversee application provisioning and deprovisioning through the identity provider, maintaining access-review documentation.

• Manage SaaS data exports, API access, sessions, OAuth applications, connected apps, and audit logs.

• Define use cases for identity, endpoint, and SaaS-abuse detection in collaboration with Security.

• Coordinate with IT, Legal, Compliance, and Communications during incidents; lead investigation and remediation efforts.

• Conduct blameless post-incident reviews and ensure follow-ups are tracked to completion.

• Establish workforce AI guidelines that encompass approved tools, SSO, RBAC, data retention, logging, access reviews, and integrations.

• Facilitate tabletop exercises and set governance for shadow IT, risky OAuth grants, and workforce AI implementation.

⛳️ Requirements

• 6 to 8+ years of experience in corporate security, IT security, security engineering, or security operations.

• At least 4 years of hands-on engineering experience with corporate controls in a cloud-native or SaaS environment.

• Extensive hands-on experience with enterprise identity providers and protocols such as SAML, OIDC, OAuth 2.0, and SCIM.

• Knowledge of sign-on and session policies, device assurance or conditional access, and lifecycle automation.

• Practical experience with device trust, MDM, and EDR solutions for macOS and Windows.

• Proven experience in hardening productivity suites and major SaaS platforms, including managing admin roles, export and API permissions, OAuth app governance, and audit logging.

• Experience in defining detection use cases and developing or refining detection rules in collaboration with a security operations team.

• Prior experience serving as an incident commander or lead responder during actual security incidents.

• Proficiency in production-quality scripting using Python or similar languages, along with experience integrating security tools using APIs.

• Ability to generate control evidence for SOC 2 and other audit requirements.

• Strong written and verbal communication skills; ability to translate technical risks into business implications and decisions.

• Capability to influence stakeholders across IT, Engineering, Security, Legal, People, and Procurement.

• Experience working with Legal and Compliance on investigations, audits, or regulatory assessments.

• Mandatory use of AI for triage, investigation, documentation, and automation while ensuring human accountability.

• Experience in healthcare, life sciences, or regulated data environments is preferred.

• Certifications such as GCIH or CISSP are considered beneficial.

🏝️ Benefits

• Performance-based bonuses may be available.

• Equity awards may be available.

• Comprehensive health insurance.

• Dental insurance.

• Vision insurance.

• Flexible time off and holidays.

• 401(k) plan with company match.

• Disability insurance.

• Life insurance.

• Leaves of absence in accordance with applicable laws and company policies.

• Hybrid work model offering flexibility.