Sr. Security Engineer

Role overview

Own and improve the security tools and controls that protect employee devices, identities, business applications, and enterprise systems. The position has a broad remit on a small security team, with a primary focus on IT and enterprise security and additional work across cloud and application security, incident response, vendor risk, and audits. It also includes setting safe administrative controls for enterprise AI tools.

Responsibilities - Maintain and tune security platforms, including policies, upgrades, integrations, and retirement of unneeded tools. - Manage endpoint protection and device controls across Mac and Windows fleets, and strengthen identity security through single sign-on, multifactor authentication, conditional access, and privileged access reviews. - Configure web, SaaS, data loss prevention, email, and enterprise application security controls. - Set administrative safeguards for AI tools, including connector access, audit logging, and data protection. - Build and refine security detections with a managed monitoring partner; respond to incidents, lead follow-up reviews, and take part in an on-call rotation. - Track cloud and code security findings, work with engineering on secure practices, automate security tasks, support audits and client reviews, assess vendor risk, and share knowledge with colleagues.

Requirements - 6+ years in cybersecurity or security-focused IT engineering. - Hands-on experience with endpoint detection and response and mobile device management across Mac and Windows. - Strong familiarity with identity platforms and controls such as SSO, MFA, and conditional access. - Experience securing SaaS platforms, using secure web gateway or security service edge tools, and applying DLP controls. - Experience tuning a SIEM and handling security incidents. - Working knowledge of SOC 2, NIST CSF, and GDPR, including how technical controls support them. - Scripting ability in Python, Bash, or PowerShell, and comfort working with REST APIs. - Clear communication and the ability to work across several security areas on a small team.

Nice to have - Experience with tools such as Okta, Microsoft Defender, Intune, Jamf Pro, Netskope, Google SecOps, or Wiz. - Experience securing enterprise AI tools, including connectors or MCP servers, or building workflow automation. - Security certifications such as CISSP, GIAC, Security+, or a cloud security credential.