Senior Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take responsibility for identity management for all individuals needing access, which includes SSO, MFA, conditional access, and managing the joiner/mover/leaver lifecycle.

• Oversee device enrollment, encryption, patching, configuration baselines, and ensure secure lock and wipe processes during offboarding.

• Manage EDR and address endpoint incidents from the point of alert to containment.

• Determine the logging data to be collected, and develop and refine detection mechanisms.

• Automate detection responses and streamline security and IT tasks using scripts and AI agents.

• Collaborate with engineering teams on cloud identity, logging, and access solutions.

• Manage the complete onboarding and offboarding processes.

• Supervise vendors and MSPs, holding them accountable to established standards.

• Act as an escalation point for IT-related issues within the team.

• Serve as the primary responder for security incidents.

• Report directly to the Head of Information Security.

• Work in close partnership with compliance and engineering leadership.

⛳️ Requirements

• Minimum of 6 years in security engineering, with substantial experience in identity, endpoint, and detection.

• Practical experience managing an identity provider, encompassing SSO, SCIM, conditional access, and device-aware policies.

• Experience in managing MDM/UEM at scale, covering enrollment, encryption, and remote wipe capabilities.

• Familiarity with EDR solutions and managing incidents from alert to containment.

• Proficiency in writing and fine-tuning detection mechanisms.

• Experience on the attacker side through red teaming, penetration testing, bug bounties, CTFs, or similar activities.

• Skills in scripting and automation using Python, Bash, or comparable languages, along with current experience in utilizing AI agents.

• Knowledge of cloud security within AWS, GCP, or Azure, particularly concerning identity, logging, and access management.

• Proven track record in managing onboarding, offboarding, and IT operations for a geographically distributed team.

• Experience in overseeing external vendors or MSPs.

• Ability to clearly communicate risk assessments to employees, engineers, and executives.

• Experience in regulated environments such as healthcare, including HIPAA, GDPR, or PCI (preferred).

• Background in managing identity or device programs through periods of hypergrowth (preferred).

• Experience securing a distributed workforce across multiple countries (preferred).

• Contributions to public security initiatives, including tools, detections, write-ups, presentations, or CVEs (preferred).

🏝️ Benefits

• Equity opportunities in an early-stage company.

• Comprehensive medical insurance (if applicable).

• Fully remote work with a distributed team.

• Paid Time Off (PTO) with a yearly minimum (≥2 weeks/year plus local national holidays).

• Personal development budget for books, courses, and coaching ($1,200/year).

• Wellness budget for gym memberships and health applications ($1,200/year).

• Complimentary membership with a clinic providing GLP-1 medications.

• Free biweekly health coaching sessions.

• Free biweekly work coaching sessions.

• Provision of a MacBook and necessary work-from-home equipment.

• Flexible scheduling to accommodate childcare needs.

• Opportunity to influence and shape company culture.