Enterprise Security Engineer

Job description

Job responsibilities

• Own the administration, policy governance, and day-to-day operation of our endpoint, email, data protection (DLP/DSPM), and SaaS security posture (SSPM) platforms
• Design and evolve enterprise DLP policy across endpoints, email, and collaboration platforms - data classification, encryption, insider risk signals, and privacy-regulation alignment - running policies from monitoring…
• Lead security technology evaluations end to end: define requirements and success criteria, run structured proofs of concept against real traffic, and drive selection and renewal decisions with data
• Define and enforce security baselines and hardening standards across macOS, Linux, and Windows - low-friction controls built in close partnership with the people who use them
• Run vulnerability and patch management for corporate systems: risk-based prioritization, remediation SLAs, and compliance tracking with IT and system owners
• Automate the repetitive: build tooling and integrations that replace manual security work and make safe behavior the default, including applying AI tooling to triage, classification, and reporting where it measurably…
• Lead clean cross-region handoffs, escalation paths, and shared runbooks, and mentor junior engineers

Job requirements

• 8+ years of hands-on enterprise or corporate security engineering
• Deep experience administering EDR/XDR platforms at scale, including policy and exception governance
• Working depth in at least two of: DLP, DSPM, email security, SSPM, SASE/SSE/ZTNA, or vulnerability management
• A track record of evaluating, selecting, and deploying enterprise security tooling with measurable outcomes
• A record of shipping preventative controls, not just detections and reports
• Scripting or automation skills (e.g., Python, shell) applied to security workflows
• Fluent AI user: you work with AI tools daily, know when to trust their output, and have shipped automations that hold up in production
• Deep experience securing macOS or Linux fleets, with working knowledge across macOS, Linux, and Windows