Enterprise Security Engineer

Job description

Job responsibilities

• Build, configure, and operate endpoint-management, device-compliance, browser-security, and endpoint detection and response controls; harden workforce devices and shared enterprise systems.
• Own and improve identity security—including Okta policies, MFA, Conditional Access, and lifecycle controls—and establish practical governance for SaaS applications, OAuth access, browser extensions, AI tools, and other…
• Create clear, usable paths that let employees adopt approved AI tooling and other technology while protecting regulated and sensitive data and meeting security, privacy, contractual, and compliance obligations.
• Translate requirements into effective configurations and workflows, partnering closely with IT Engineering to solve shared problems, reduce recurring friction, and make controls easy to operate.
• Build and tune enterprise detections; evaluate alerts and control gaps; lead corporate-side incident response; make proportionate risk decisions and coordinate remediation with the teams that own the affected systems.
• Partner with Product Security, Cloud Infrastructure, IT, and Facilities when enterprise-security concerns intersect with applications, cloud services, engineering systems, or physical security.
• Establish and maintain governance for the adoption and use of AI tools and other rapidly emerging workplace technologies, ensuring security, privacy, and compliance requirements are met.
• Travel up to 20% to Gecko offices and other locations as needed to support enterprise security initiatives, physical security projects, incident response, and cross-functional collaboration.

Job requirements

• 3+ years of experience in Enterprise Security Engineering, Security Engineering, IT Security, or a related hands-on security engineering role.
• Hands-on experience administering endpoint management and endpoint detection and response (EDR) solutions in production environments.
• Experience administering or securing identity and access management (IAM) platforms, including SSO, MFA, or lifecycle management
• Experience evaluating, governing, or administering SaaS applications, OAuth integrations, and enterprise security controls.
• Experience working with regulated, customer-protected, or other sensitive data (e.g., CUI, HIPAA, PCI, SOC 2).
• Strong systems configuration, troubleshooting, workflow design, and operational ownership skills.
• Demonstrated ability to balance security and compliance requirements with business needs and user experience.
• Excellent written and verbal communication skills, with the ability to partner effectively across Security, IT, Engineering, Compliance, Legal, and other cross-functional teams.