Senior Corporate Security Engineer

About the role

The Senior Corporate Security Engineer role is responsible for designing, building and operating the technical security systems and controls that protect Charlie Health’s corporate environment, workforce systems, endpoints, SaaS platforms, cloud-connected services and internal operations.

Responsibilities

• Design, build and operate technical security controls across Charlie Health’s corporate technology environment
• Engineer scalable security solutions for identity, endpoints, SaaS platforms, cloud-connected services, collaboration tools and internal systems
• Translate security requirements into reliable technical controls, automations, detections and operational workflows
• Partner with IT Engineering to embed secure-by-design practices into enterprise systems, integrations and infrastructure
• Establish control patterns that improve security posture, operational efficiency, auditability and resilience
• Help secure the enterprise use of AI tools, LLM platforms, AI-enabled workflows and emerging AI security products
• Support cloud security visibility and control implementation across AWS and related services, including use of CloudTrail and other telemetry sources
• Build and improve detections, alerts, dashboards, runbooks and response workflows across corporate security tooling
• Support investigation and response for identity, endpoint, SaaS, email, cloud, data exposure and corporate security events
• Tune security tools to reduce noise, improve signal quality and increase confidence in control effectiveness
• Develop repeatable playbooks and operating procedures that improve incident readiness and operational consistency
• Help secure Charlie Health’s use of AI tools, LLM platforms, AI agents and AI-enabled workflows
• Evaluate and operationalize controls for AI data protection, prompt-layer security, access governance, logging and usage monitoring
• Support data protection requirements and reduce operational risk
• Build automations and reporting that improve DLP response, control monitoring and evidence collection
• Enable the business to move quickly and safely

Qualifications

• 5+ years of experience in security engineering, corporate security, infrastructure security, enterprise security, IT security, cloud security or a related technical discipline
• Deep hands-on experience designing, building and operating technical security controls in enterprise environments
• Strong experience with identity and access management concepts, including MFA, conditional access, privileged access, lifecycle automation, service accounts and least privilege
• Experience working with security tools such as MDR platforms, EDR, SIEM, cloud security tools, endpoint management tools, vulnerability management tools or DLP systems
• Experience with security platforms and telemetry sources such as Expel MDR, SentinelOne, Wiz, CloudTrail, Sumo Logic or similar tools
• Experience with endpoint security, MDM, secure configuration management and vulnerability remediation across Mac, Windows or mobile environments
• Familiarity with detection engineering, alert tuning, incident response workflows and security operations processes
• Strong understanding of Zero Trust principles, identity-centric security, least privilege, device trust and secure system design
• Ability to work cross-functionally with IT, Security, Engineering, Compliance and business stakeholders
• Strong documentation, ownership, judgment and ability to operate independently in ambiguous environments