Назад
Company hidden
5 дней назад

Corporate Security Engineer

220 000 - 240 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Corporate Security Engineer (Detection, Response, and LLM Security): Hardening a modern corporate security environment across endpoints, identity, SaaS, Google Workspace, and production boundaries with an accent on detection engineering, incident response, and LLM-driven triage. Focus on building measured security automation, defending against account takeover and data exfiltration, and turning corporate findings into product detection improvements.

Location: Remote; remote-first workplace with an office in San Francisco, California.

Salary: $220,000–$240,000 annually.

Company

hirify.global builds security solutions for protecting Google Workspace and customer data.

What you will do

  • Own corporate telemetry, detection content, incident response, and playbooks for account takeover, session token theft, malicious OAuth grants, admin abuse, and insider exfiltration.
  • Design and build an LLM-driven triage agent for privileged access, customer data access, endpoint alerts, and identity alerts with labeled evaluation sets and measured precision and recall.
  • Manage Mac endpoint security, including MDM enforcement, EDR coverage, browser-level DLP, and BYOD posture for iOS and Android.
  • Maintain identity and SaaS security through phishing-resistant authentication, access-review automation, SSO coverage, and OAuth application review pipelines.
  • Govern Google Workspace alerting, OAuth, Apps Script, sharing, and DLP, while partnering with Engineering on product detection improvements.
  • Secure the corporate-to-production boundary through cross-environment detections, just-in-time access, and audit logging.

Requirements

  • 6+ years of hands-on experience in corporate or enterprise security or detection and response.
  • Experience owning a SIEM, detection content, and incident response.
  • Programming experience in Python, Go, or TypeScript and the ability to automate vendor API workflows.
  • Deep knowledge of OAuth, SAML/OIDC, session and token lifecycles, and cloud IAM.
  • Experience managing a Mac fleet with modern MDM and EDR and moving controls from deployment to enforcement.
  • Experience building or seriously experimenting with LLM-driven security workflows, including prompting, tool use, and evaluation.

Nice to have

  • Experience contributing detection logic or security features to a product codebase.
  • A technical paper, technical conference presentation, or open-source security tooling.

Culture & Benefits

  • Remote-first work environment.
  • Modern Mac-only corporate fleet with Google Workspace, SIEM, IdP, EDR, fleet management, and cloud production systems.
  • Collaborative, curious, and direct working style.
  • Opportunity to work as customer zero and influence security features shipped to customers.
  • Inclusive equal-opportunity workplace.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →