Security Engineer

TL;DR

Security Engineer (Cybersecurity): Architect and build endpoint security posture across macOS, Windows, and mobile devices with an accent on secure-by-default controls, automation, and telemetry. Focus on designing MDM policies as code, patch automation, and AI-assisted security operations to enhance corporate security in an evolving agentic AI environment.

Location: Hybrid in New York, NY (HQ) with relocation support to NYC or SF

Salary: $172K – $236K (NYC Target Base Salary) plus equity

Company

Ramp builds smart infrastructure for finance teams automating transaction flows and risk management for over 70,000 companies.

What you will do

• Write and ship MDM policies as code for macOS, Windows, and mobile with staged rollouts and rollback.
• Build patch automation to quickly close exposure windows without impacting employee experience.
• Manage software distribution across the device fleet.
• Mine fleet telemetry to build dashboards, alerts, and AI-assisted automation reducing operational toil.
• Own managed browser and extension policies ensuring auditable control.
• Serve as last line of defense on endpoint escalations beyond IT Operations.

Requirements

• Location: Must be based in or willing to relocate to the United States (NYC or SF)
• Deep macOS security experience with Jamf Pro, FleetDM, or equivalent MDM at scale.
• Strong Infrastructure as Code fundamentals and GitOps delivery model using Terraform and CI pipelines.
• Solid knowledge of Google Workspace in managed enterprise environments including Chrome Browser Cloud Management.
• A point of view on how agentic AI impacts corporate security.

Nice to have

• Experience shipping open source endpoint and device management tooling.
• Built automated progressive rollout systems based on telemetry.
• Managed mixed device fleets with depth on at least one platform.
• Applied AI to operational security problems beyond prototyping.

Culture & Benefits

• Flexible PTO and unlimited AI token usage.
• Centralized home-office equipment ordering and weekly coffee stipend.
• Comprehensive medical, dental, vision insurance with partial dependent coverage.
• 401(k) with employer match, fertility HRA, parental leave up to 16 weeks at full pay.
• Pet insurance, One Medical membership, and in-office perks.
• Relocation support to NYC or SF as needed.