Enterprise Security Engineer

About the Role

You'll own enterprise security across endpoints, identity, cloud services, and SaaS applications for a globally distributed team. You'll work directly with IT and Engineering, and you'll use AI-powered tooling to move faster than any traditional security team. This role is for someone who scripts before they click, builds before they buy, and sees automation as a force multiplier, not a nice-to-have.

You Might Be This Person If

• You automate repetitive security tasks before they become recurring headaches, and you reach for Python or Bash as naturally as you reach for a runbook.
• You treat SaaS sprawl as an engineering problem, not an audit problem, and you build controls that scale without constant manual oversight.
• You think about attacker techniques (MITRE ATT&CK is a starting point, not a ceiling) and design detections that actually catch things.
• You've built or used AI-assisted workflows to speed up threat detection, alert triage, or security reporting, and you're always looking for more places to apply them.
• You hold the "secure by default" bar without being the team that slows everyone else down.
• You can explain risk trade-offs clearly to engineers and business stakeholders, not just security people.
• You're never satisfied with "we have a tool for that" if the tool isn't actually being used well.

Requirements

• 4+ years of hands-on enterprise security experience, with real depth in endpoint security across a MacOS-heavy fleet (EDR, NGAV, MDM).
• Operational experience with VPN and ZTNA platforms, and working knowledge of modern email security (SPF, DKIM, DMARC).
• Proven ability to secure SaaS platforms with preventive and detective controls, including DLP and logging pipelines.
• Scripting proficiency in Python (strong preference), Bash, or a comparable language, used for automation, not just one-off fixes.

What You'll Actually Do

• Harden a global MacOS fleet using EDR, NGAV, and MDM, enforcing patching cadences and security baselines at scale.
• Build and enforce IAM policies (SSO, MFA, SCIM, least-privilege), with automated provisioning and de-provisioning wherever possible.
• Secure Google Workspace and the broader SaaS stack, implementing DLP controls and logging pipelines that surface real data exposure risk.
• Administer and improve VPN and zero-trust remote access infrastructure for a distributed workforce.
• Develop AI-assisted detection and response workflows, automating alert triage, incident timelines, and routine reporting.
• Embed security into how Engineering and IT build and ship, not just how the company audits afterward.
• Monitor the threat landscape, translate attacker techniques into actionable detections, and stay ahead of what's actually being used against companies like ours.
• Build internal security tooling and dashboards where off-the-shelf falls short, using automation pipelines to close the gaps.

Added Value

• Experience owning a risk-based security roadmap, including prioritization frameworks that tie security investment to actual business exposure.
• Deep familiarity with adversary tactics via MITRE ATT&CK, with hands-on experience designing detection and response strategies around those techniques.

Benefits

• Medical, dental, and vision coverage — Sendbird covers 100% of the premium for employees and roughly 80% for dependents.
• Generous time off: 20 days PTO, 13 company holidays, 7 sick days, 2 rest & rejuvenation days, 1 volunteer day, and your birthday off.
• $3,500 annual "Be Your Best Self" boost for gym memberships, therapy, books, courses, massages, and more.
• Parental leave for all new parents.
• 401(k) from day one with auto-enrollment, flexible contributions, and access to Vanguard's investment platform.
• HSA & FSA options for healthcare, dependent care, and commuter expenses.
• Life & disability coverage fully paid — life insurance and AD&D at 2x your salary, plus short- and long-term disability at no cost to you.

Schedule

Flexible work schedule with a minimum of three days per week in-office for collaboration and relationship building. Some roles may require more frequent in-office attendance; work with your manager to understand specific requirements.

Pay

Salary range: $190,000 – $230,000. Final compensation decisions consider skill sets, experience, training, licensure, certifications, and other business and organizational needs.

This response is AI-generated, for reference only.