Security Engineer, Corporate Security

Accountabilities: The Security Engineer, Corporate Security will be responsible for designing, implementing, and continuously improving security controls that protect internal systems, users, and business operations. This role requires a balance of technical expertise, operational ownership, and strong collaboration skills to reduce risk while enabling teams to move efficiently.

Design, implement, and manage security controls and policies across corporate IT environments, ensuring confidentiality, integrity, and availability of business and customer data.

Own and improve identity and access management programs, including SSO, MFA, identity providers, and access governance.

Manage endpoint security capabilities such as EDR, MDM, device protection, and security configuration standards.

Strengthen email and network security through phishing protection, data loss prevention, firewalls, VPNs, and related controls.

Conduct security assessments of internal systems and third-party vendors, identifying vulnerabilities and recommending practical remediation strategies.

Own vulnerability management processes, including security scanning, prioritization, remediation tracking, and patch management.

Develop security awareness initiatives, including employee education and phishing simulation programs.

Support compliance activities, audits, penetration tests, and security assessments while helping teams address findings effectively.

Evaluate and manage third-party security risks through vendor reviews, questionnaires, contract assessments, and ongoing monitoring.

Investigate security incidents and potential insider threats in collaboration with relevant business partners.

Partner with engineering and IT teams to integrate security requirements into projects, system designs, and operational processes.

Promote secure practices across the organization by mentoring teams and encouraging a strong security culture.

Requirements:

The ideal candidate is an experienced security professional with strong knowledge of corporate security environments, identity management, and risk reduction strategies. They should be comfortable operating independently, communicating with technical and non-technical stakeholders, and managing multiple priorities in a fast-moving environment.

Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.

5+ years of experience in information security with hands-on experience across corporate security domains such as identity, endpoint, network, and governance.

Strong understanding of enterprise identity platforms, SSO, MFA, authentication technologies, and access management practices.

Experience with endpoint security tools, MDM platforms, email security solutions, and corporate security infrastructure.

Knowledge of compliance frameworks such as SOC 2 and ISO 27001.

Familiarity with security frameworks including NIST, FedRAMP, FISMA, or CJIS is a plus.

Understanding of privacy regulations such as GDPR, CCPA, and related data protection requirements.

Experience partnering with engineering teams on secure development practices and security reviews.

Ability to automate security processes using scripting languages such as Python, shell scripting, or similar tools.

Experience with vendor risk management and third-party security assessments.

Strong analytical and problem-solving skills with the ability to evaluate complex security risks.

Excellent written and verbal communication skills, with the ability to explain technical concepts clearly.

Strong organizational skills and the ability to manage multiple projects in a dynamic environment.

A proactive mindset with strong ownership, accountability, adaptability, and a willingness to improve security processes continuously.

Benefits:

Competitive compensation adjusted based on location and experience.

Salary range for candidates based in New York: $200,000 - $255,000 USD.

Meaningful equity opportunities to share in the value created.

401(k) matching program.

100% coverage of medical, dental, and vision insurance premiums for employees and dependents.

12 weeks of paid parental leave for all parents.

Family-forming and gender-affirming care stipends.

Unlimited paid time off.

Opportunity to work remotely in a collaborative, mission-driven environment.

The chance to contribute to innovative security solutions protecting sensitive information and critical systems.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1