Security Engineer II, Corporate Security

Remitly•Seattle, WA

1d•$168,000 - $210,000•Hybrid

About The Position

Remitly is seeking an AI-forward Security Engineer to join Corporate Security (CorpSec) within Security & Privacy and build automation that secures the workforce, identities, and devices. The role focuses on ensuring employees use secure accounts and devices by default, with access granted and removed automatically. The engineer will build and operate identity, access, endpoint, and SaaS security controls, and develop the code and agents that run them. They will partner with IT and engineering teams to provide secure, low-friction paved roads for employees. Success requires strength in identity and access management, endpoint security, and software engineering, along with curiosity and a willingness to learn new tools. The role includes participating in the team's on-call rotation. Corporate team members are expected to work in the office at least 50% of the time monthly, typically three days per week; managers may set higher expectations for their teams.

Requirements

Experience building and operating corporate security controls for identity, endpoint, or SaaS at an organization with 1,000 or more users.
Hands-on experience with identity platforms and protocols such as Okta, SAML, OIDC, and SCIM.
Experience securing macOS and mobile devices with MDM, EDR, and tools such as Santa.
Proficiency in a programming language such as Python or Golang, and experience building automation that detects risk or speeds up response.
Hands-on experience delivering production or open-source software through agentic development.
Familiarity with zero-trust access, such as secure access service edge (SASE), and cloud-native infrastructure such as AWS and Kubernetes.
Curiosity demonstrated by experimenting, building, and staying current on open-source and new security tools.
Clear communication about security risks and tradeoffs, and experience influencing other teams to act without formal authority.

Responsibilities

Build and maintain automation for single sign-on, phishing-resistant authentication, and joiner, mover, and leaver access so access is granted and removed without a ticket.
Configure, monitor, and improve mobile device management (MDM), endpoint detection and response (EDR), and SaaS security controls.
Use agents and code to identify and fix misconfigurations and excess access across corporate systems, and develop tools the team can rely on.
Triage Corporate Security requests and security events, participate in the team's on-call rotation, and address root causes.
Work with IT, engineering, and business owners to securely and quickly onboard SaaS tools and AI integrations, and help teams make principled security decisions.
Provide thorough code reviews, keep runbooks current, and help new teammates and security champions apply security standards.