pythongotypescriptsiemllmstartupincident responseoauthoidcsamldetection and response
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Выше рынка
$220к-240к/год
$150к$190кмедиана$220к
По похожим ролям (48) ~ $190к/год
На СНГ рынке: $4.2к/мес ($2.3к - $5.5к)
91
Крутая вакансия
развернуть
Чётко очерченная senior-роль сочетает высокую зарплату, реальную ответственность и практическую работу с LLM в безопасности, а также влияние на продуктовые детекты; удалённый формат ограничен США.
Кликните для подробной информации
Только СШАВыше рынкаLLM в безопасностиЧёткая зона ответственностиВлияние на продуктСовременный стек
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Corporate Security Engineer (Detection, Response, and LLM Security): Hardening a modern corporate security environment across endpoints, identity, SaaS, Google Workspace, and production boundaries with an accent on detection engineering, incident response, and LLM-driven triage. Focus on building measured security automation, defending against account takeover and data exfiltration, and turning corporate findings into product detection improvements.
Location: Remote; remote-first workplace with an office in San Francisco, California.
Salary: $220,000–$240,000 annually.
Company
hirify.global builds security solutions for protecting Google Workspace and customer data.
What you will do
Own corporate telemetry, detection content, incident response, and playbooks for account takeover, session token theft, malicious OAuth grants, admin abuse, and insider exfiltration.
Design and build an LLM-driven triage agent for privileged access, customer data access, endpoint alerts, and identity alerts with labeled evaluation sets and measured precision and recall.
Manage Mac endpoint security, including MDM enforcement, EDR coverage, browser-level DLP, and BYOD posture for iOS and Android.
Maintain identity and SaaS security through phishing-resistant authentication, access-review automation, SSO coverage, and OAuth application review pipelines.
Govern Google Workspace alerting, OAuth, Apps Script, sharing, and DLP, while partnering with Engineering on product detection improvements.
Secure the corporate-to-production boundary through cross-environment detections, just-in-time access, and audit logging.
Requirements
6+ years of hands-on experience in corporate or enterprise security or detection and response.
Experience owning a SIEM, detection content, and incident response.
Programming experience in Python, Go, or TypeScript and the ability to automate vendor API workflows.
Deep knowledge of OAuth, SAML/OIDC, session and token lifecycles, and cloud IAM.
Experience managing a Mac fleet with modern MDM and EDR and moving controls from deployment to enforcement.
Experience building or seriously experimenting with LLM-driven security workflows, including prompting, tool use, and evaluation.
Nice to have
Experience contributing detection logic or security features to a product codebase.
A technical paper, technical conference presentation, or open-source security tooling.
Culture & Benefits
Remote-first work environment.
Modern Mac-only corporate fleet with Google Workspace, SIEM, IdP, EDR, fleet management, and cloud production systems.
Collaborative, curious, and direct working style.
Opportunity to work as customer zero and influence security features shipped to customers.
Inclusive equal-opportunity workplace.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →