Enterprise Security Engineer
About The Position
We're building AI that handles real customer conversations at scale. That means identity systems, SaaS stacks, and endpoints that have to work, and stay secure, without getting in the way of the people building and shipping every day. The threat landscape isn't standing still, and neither are we. This role exists because we need someone who thinks about security the way our engineers think about product: automate what's repetitive, build what's missing, and make the secure path the easy path. You'll own enterprise security across endpoints, identity, cloud services, and SaaS applications for a globally distributed team. You'll work directly with IT and Engineering, and you'll use AI-powered tooling to move faster than any traditional security team. This role is for someone who scripts before they click, builds before they buy, and sees automation as a force multiplier, not a nice-to-have.
Requirements
- 4+ years of hands-on enterprise security experience, with real depth in endpoint security across a MacOS-heavy fleet (EDR, NGAV, MDM).
- Operational experience with VPN and ZTNA platforms, and working knowledge of modern email security (SPF, DKIM, DMARC).
- Proven ability to secure SaaS platforms with preventive and detective controls, including DLP and logging pipelines.
- Scripting proficiency in Python (strong preference), Bash, or a comparable language, used for automation, not just one-off fixes.
Nice To Haves
- Experience owning a risk-based security roadmap, including prioritization frameworks that tie security investment to actual business exposure.
- Deep familiarity with adversary tactics via MITRE ATT&CK, with hands-on experience designing detection and response strategies around those techniques.
Responsibilities
- Harden a global MacOS fleet using EDR, NGAV, and MDM, enforcing patching cadences and security baselines at scale.
- Build and enforce IAM policies (SSO, MFA, SCIM, least-privilege), with automated provisioning and de-provisioning wherever possible.
- Secure Google Workspace and the broader SaaS stack, implementing DLP controls and logging pipelines that surface real data exposure risk.
- Administer and improve VPN and zero-trust remote access infrastructure for a distributed workforce.
- Develop AI-assisted detection and response workflows, automating alert triage, incident timelines, and routine reporting.
- Embed security into how Engineering and IT build and ship, not just how the company audits afterward.
- Monitor the threat landscape, translate attacker techniques into actionable detections, and stay ahead of what's actually being used against companies like ours.
- Build internal security tooling and dashboards where off-the-shelf falls short, using automation pipelines to close the gaps.
Benefits
- Medical, dental, and vision coverage, on us. Sendbird covers 100% of the premium for our employees and roughly 80% for their dependents.
- Generous time off. 20 days PTO, 13 company holidays, 7 sick days, 2 rest & rejuvenation days, 1 volunteer day, and your birthday off.
- $3,500 annual "Be Your Best Self" boost. Spend it on anything that helps you grow. Gym memberships, therapy, books, courses, massages, and more.
- Parental leave for all new parents. Time to be present for the moments that matter most.
- 401(k) from day one. Auto-enrollment, flexible contributions, and access to Vanguard's investment platform.
- HSA & FSA options. Pre-tax accounts to cover healthcare, dependent care, and commuter expenses.
- Life & disability coverage, fully paid. Life insurance and AD&D at 2x your salary, plus short- and long-term disability at no cost to you.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
