Enterprise Security Engineer

Sendbird • San Mateo, CA

74d

About The Position

As an Enterprise Security Engineer at Sendbird, you will be responsible for securing our internal information systems and SaaS applications that power our business. You will design, implement, and operate security controls across endpoints, identity systems, and cloud services, while enabling Sendbirdians to work productively in a secure environment. This role is highly collaborative, partnering with IT and Engineering teams to drive a 'secure by default' culture across our workforce technologies.

Requirements

• 4+ years of relevant experience
• Hands-on experience managing security controls for endpoints at scale using EDR, NGAV, and MDM platforms in a MacOS heavy fleet
• Operational experience with secure remote access platforms (VPN, ZTNA)
• Knowledge of modern email security protocols (SPF, DKIM, DMARC) and phishing defenses
• Expertise securing SaaS platforms and implementing preventive and detective controls
• Proficiency in a scripting language (Python - a strong plus, Bash, or similar) for automation
• Ability to balance technical depth with empathy for end users, prioritizing pragmatic security outcomes

Nice To Haves

• Experience guiding risk-based enterprise security roadmaps for prioritizing risks reduction, and improving organization's security posture
• Knowledge of adversary tactics (MITRE ATT&CK) and experience applying detection and response strategies

Responsibilities

• Develop and operate enterprise security capabilities across endpoint protection, email security, SaaS applications, and secure remote access.
• Partner with IT to harden employee endpoints (MacOS) using EDR, NGAV, and MDM platforms, ensuring timely patching, compliance with security baselines, and pragmatic risk reduction.
• Design and enforce security policies for identity and access management, leveraging SSO, MFA, SCIM, and least-privilege principles.
• Administer and improve VPN and zero-trust networking infrastructure to protect Sendbird's global workforce.
• Implement and monitor security controls across Google Workspace.
• Work with business and engineering teams to secure SaaS applications, applying DLP, logging & monitoring to prevent unauthorized data exposure.
• Stay ahead of evolving attacker techniques and make recommendations that strengthen Sendbird's enterprise security posture.
• Educate and support employees on secure practices, enabling them to work productively while maintaining security standards.

Benefits

• 20 days PTO, 12 paid US company holidays, 7 sick days, 2 volunteer days, plus a rest/rejuvenation and birthday day off
• Company subsidized medical, dental, vision insurance
• Flexible spending accounts
• Parental leave
• Life and disability insurance
• Be Your Best Self: An annual stipend of $3,500 for expenses ranging from professional development classes and training, to personality assessments, gym memberships, books, fitness classes, mental health services and massages

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Publishing Industries
• Number of Employees: 251-500 employees