Enterprise Security Engineer

Responsibilities

• Harden a global macOS fleet with EDR, NGAV, MDM, patching cadences, and security baselines.
• Build and enforce IAM policies covering SSO, MFA, SCIM, least privilege, and automated provisioning and de-provisioning.
• Secure Google Workspace and the broader SaaS environment with DLP controls and logging pipelines.
• Administer and improve VPN and zero-trust remote access infrastructure.
• Develop AI-assisted detection and response workflows for alert triage, incident timelines, and routine reporting.
• Embed security practices into Engineering and IT workflows and build internal security tooling and dashboards.
• Monitor attacker techniques and translate them into actionable detections and response strategies.

Requirements

• 4+ years of hands-on enterprise security experience.
• Deep endpoint security experience across a macOS-heavy fleet, including EDR, NGAV, and MDM.
• Operational experience with VPN and ZTNA platforms and working knowledge of SPF, DKIM, and DMARC.
• Experience securing SaaS platforms with preventive and detective controls, including DLP and logging pipelines.
• Scripting proficiency in Python, Bash, or a comparable language for automation.
• Clear communication of security risk trade-offs to engineering and business stakeholders.
• Preferred: experience owning a risk-based security roadmap and designing detection and response strategies using MITRE ATT&CK.
• Preferred: experience with AI-assisted workflows for threat detection, alert triage, or security reporting.

Benefits

• Medical, dental, and vision coverage with 100% of employee premiums and approximately 80% of dependent premiums covered.
• 20 days of PTO, 13 company holidays, 7 sick days, 2 rest and rejuvenation days, 1 volunteer day, and a birthday day off.
• $3,500 annual professional and personal wellness benefit.
• Parental leave for all new parents.
• 401(k) eligibility from day one with Vanguard access.
• HSA and FSA options.
• Fully paid life, AD&D, and short- and long-term disability coverage.
• Flexible work schedule with a minimum of three in-office days per week.