Enterprise Security Engineer - R01573019

Brillio • New York, NY

3d

About The Position

Brillio is seeking an Enterprise Security Engineer to secure enterprise technologies and strengthen security across endpoints, identity, SaaS applications, office networks, and business and data intelligence platforms. The role includes modernizing endpoint management and security operations across macOS, iOS, Windows, and Linux, and improving endpoint security architecture, automation, and reliability of control deployment.

The engineer will manage endpoint and SaaS security configurations through Terraform and GitOps practices, automate secure endpoint provisioning and lifecycle tasks, and establish security guardrails for AI applications and Model Context Protocol (MCP) servers. The role also assesses third-party and AI-related risks, reviews architecture and processes, partners with Detection and Response on incident workflows and Business Email Compromise mitigation, and continually improves enterprise security controls as the organization grows and adopts AI.

Requirements

• Practical experience in one or more areas such as endpoint security, identity management, AI security, or Infrastructure-as-Code.
• Proficiency in Python or Go, with experience developing automation solutions for security operations and infrastructure management.
• Hands-on Terraform experience, including module design, state management, code reviews, version control, and CI/CD pipeline-based deployments.
• Experience with endpoint management and security platforms such as Jamf Pro, FleetDM, MDM, or EDR.
• Strong knowledge of managing and securing macOS environments at scale.
• Experience configuring and managing security controls for identity providers and enterprise platforms such as Okta, Google Workspace, and LDAP.
• Understanding of SSO, SAML, SCIM, OAuth, OIDC, SMTP, and DNS protocols.
• Experience with AI security controls, MCP server management, secure AI integrations, and managing approved AI tools and agents.
• Ability to conduct threat modeling, security assessments, architecture reviews, and third-party risk evaluations.

Nice To Haves

• Experience implementing Data Loss Prevention (DLP), firewall policies, and enterprise security controls.
• Hands-on experience managing Okta integrations, tools, and MCP environments.
• Ability to identify and communicate security vulnerabilities and recommend effective remediation strategies.
• Strong collaboration skills and ability to guide development teams toward secure engineering practices.
• Ability to work effectively with distributed, remote teams across multiple functions.
• A practical, empathetic, and accountable approach to security engineering.
• Strong interest in continuously learning and adapting to emerging security technologies and threats.

Responsibilities

• Secure enterprise technologies, including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence platforms.
• Modernize endpoint management, identity, and security operations across macOS, iOS, Windows, and Linux; strengthen endpoint security architecture, automation, and control deployment reliability.
• Manage endpoint and SaaS security configurations using Terraform, version control, merge requests, CI pipelines, and automated deployments.
• Automate secure endpoint provisioning, configuration, patching, and software distribution while maintaining security and compliance standards.
• Establish AI security guardrails for business applications and MCP servers; evaluate prompt security, review AI-generated applications, and manage approved AI agents and endpoint tools.
• Evaluate security controls and AI-related risks for third-party systems integrated into the enterprise environment.
• Conduct architecture, design, and process automation reviews.
• Partner with the Detection and Response team to develop incident workflows, identify security priorities, and implement solutions to mitigate Business Email Compromise threats.
• Perform regular security assessments of enterprise applications and controls, and develop security principles and tools to support organizational growth and AI adoption.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed