Corporate Security Engineer

Cast & Crew

About The Position

We are seeking a skilled Corporate Security Engineer to strengthen our organization’s security posture by managing critical aspects of our security infrastructure. This role reports to the Corporate SecOps Manager and participates in an operations team alongside Incident Response engineers to collaborate and ensure comprehensive coverage of security tools, identify visibility gaps that affect the security posture, and enhance the incident response team’s ability to detect and protect against cyber threats. This role is responsible for maintaining and improving user security hygiene, SaaS management, endpoint protection, and email security systems. The Corporate Security Engineer will collaborate closely with infrastructure, DevOps, IT support, and engineering teams to ensure endpoint protection is in place, strategize deployment for areas not yet protected, and regularly audit tools for unmanaged or unprotected assets. The ideal candidate will combine technical expertise with strong cross-functional collaboration skills and a deep understanding of security best practices to protect our corporate environment from emerging threats.

Requirements

Bachelor's degree in Computer Science, Information Security, or related field, or equivalent practical experience
5+ years of experience in corporate security, IT security, or a related role
Hands-on experience with endpoint security solutions (EDR, antivirus, MDM/UEM platforms)
Proficiency with email security technologies, including spam filtering, anti-phishing tools, and email authentication protocols
Knowledge of security frameworks and standards such as NIST, CIS Controls, or ISO 27001
Strong analytical and problem-solving skills with attention to detail
Proven ability to collaborate effectively with cross-functional teams including infrastructure, DevOps, IT support, and engineering
Excellent communication skills and ability to explain security concepts to technical and non-technical audiences

Nice To Haves

Industry certifications such as CISSP, Security+, CEH, or equivalent
Experience with cloud security platforms (AWS and Azure), cloud identity providers, and cloud compute systems
Experience with SaaS security platforms and security analytics
Background in security operations or incident response, with understanding of attack path, common business security incidents, and threat prevention
Experience conducting asset inventory audits and gap assessments to identify security coverage deficiencies

Responsibilities

SaaS Security Management Lead the implementation and ongoing management of SaaS Security platform to provide comprehensive visibility and security governance across the organization’s SaaS application portfolio
Conduct discovery and inventory of all SaaS applications in use across the organization, including shadow IT, to maintain an accurate and up-to-date application catalog
Collaborate with application owners and business teams to remediate identified SaaS security issues and implement security best practices for SaaS application usage
Endpoint Security Deploy, configure, and maintain endpoint detection and response (EDR) solutions across all corporate devices
Work closely with infrastructure, DevOps, IT support, and engineering teams to ensure comprehensive endpoint protection coverage and coordinate deployment strategies for unprotected areas
Manage antivirus, anti-malware, and endpoint protection platforms to ensure comprehensive threat prevention
Monitor endpoint health and security alerts, investigate suspicious activity, and respond to security incidents in a timely manner
Implement and enforce device hardening standards, including patch management, encryption policies, and secure configuration baselines
Oversee mobile device management (MDM) and ensure compliance with security policies, oversee unified endpoint management (UEM) to secure corporate devices, ensuring compliance with security policies across all endpoints
Email Security Maintain and optimize email security solutions, including spam filters, anti-phishing tools, and email encryption systems
Configure and manage email authentication protocols such as SPF, DKIM, and DMARC to prevent email spoofing and improve deliverability
Monitor email security logs and alerts to identify and mitigate threats such as phishing attempts, malware, and business email compromise (BEC)
Collaborate with IT teams to implement secure email gateways and data loss prevention (DLP) policies
Respond to user-reported suspicious emails and coordinate incident response activities
Stay current with emerging security threats, vulnerabilities, and industry best practices
Collaborate with the operations team and Incident Response engineers to identify and address visibility gaps in security tooling that could impact detection and response capabilities
Conduct regular audits of security tools to identify unmanaged or unprotected assets and develop remediation plans to ensure complete coverage
Support and collaborate in security incident response and contribute to post-incident analysis and remediation efforts
Support compliance initiatives and audit activities related to security controls and frameworks
Assist with physical security systems including CCTV, alarm systems, and access control systems as needed