Senior Corporate IT Security Engineer

Komodo Health

2d•$150,000 - $215,000

About The Position

Komodo Health is hiring a senior individual contributor to engineer and operate Corporate IT Security, protecting the employee environment across identity, devices, endpoints, internal networks, workforce SaaS and AI tools, and workforce-related risk. The role sits in IT and partners closely with Security, which owns security monitoring, cloud and production security, and the company incident response program. The engineer leads incidents limited to the corporate environment under that program and serves as IT’s security partner to Legal, Compliance, and business leaders. This is a hands-on position, with at least 70% of time spent configuring, scripting, investigating, and remediating; remaining work includes corporate incident response, documentation, and cross-functional partnership. The role does not manage a team. During the first 90 days, the engineer will assess corporate identity, devices, and SaaS and deliver a prioritized remediation backlog with owners, addressing the highest-risk exposures first. Over the first 12 months, outcomes include tying access to business-critical applications to device posture; using phishing-resistant MFA for privileged access; provisioning and deprovisioning applications through the identity provider; meeting measurable offboarding SLAs and completing auditable access reviews; improving SaaS permissions, session protections, OAuth governance, and secret handling; delivering detection use cases with Security; establishing ownership and response for corporate alerts; conducting at least two cross-functional tabletop exercises; completing post-incident reviews and follow-ups; and establishing enabling governance for shadow IT, risky OAuth grants, and workforce AI adoption. The engineer hardens identity and access controls, implements device trust and conditional access across a mixed macOS and Windows fleet, ensures joiner-mover-leaver integrity, improves workforce SaaS security posture, and leads corporate incident response. They also establish guardrails for employee AI tools, connectors, and integrations, including approved-tool standards, SSO and domain capture, RBAC, retention, logging, access reviews, and intake through the existing vendor security review. AI in products and engineering workflows remains within Security’s remit. The role requires using AI in the engineer’s own work for triage, investigation, documentation, and automation, with human accountability for all decisions.

Requirements

6–8+ years in corporate security, IT security, security engineering, or security operations, including 4+ years of hands-on engineering of corporate controls at a cloud-native or SaaS company.
Deep hands-on experience with an enterprise identity provider and SAML, OIDC, OAuth 2.0, and SCIM, including sign-on and session policies, device assurance or conditional access, and lifecycle automation.
Hands-on experience with device trust, MDM, and EDR across macOS and Windows, including implementing posture-based access without disrupting productivity.
Experience hardening productivity suites and major SaaS platforms, including administrator roles, export and API permissions, OAuth app governance, and audit logging.
Experience defining detection use cases and writing or tuning detection rules alongside a security operations team.
Experience serving as incident commander or lead responder on real security incidents, making containment decisions under pressure, and conducting post-incident reviews that led to change.
Production-quality scripting in Python or a similar language and experience integrating security tools through APIs.
Experience producing control evidence for SOC 2 and other audits.
Clear writing and executive communication, with the ability to translate technical risk into business impact and decisions and to work through influence across IT, Engineering, Security, Legal, People, and Procurement.
Experience partnering with Legal and Compliance on investigations, audits, or regulatory reviews.
Use AI in daily work for triage, investigation, documentation, and automation, with clear human accountability for every decision.

Nice To Haves

Experience in healthcare, life sciences, or another environment handling regulated or sensitive data.
Experience at a high-growth company through Series C–E or pre-IPO stages.
Experience with identity workflow automation, identity threat detection, or device-assurance integrations.
Experience with SSPM or compliance-automation platforms.
Experience with insider-risk or DLP programs, or digital forensics.
Experience evaluating and implementing enterprise security vendors.
Certifications such as GCIH or CISSP.

Responsibilities

Assess corporate identity, devices, and SaaS, then create a sequenced remediation backlog with named owners and address the highest-risk exposures first.
Harden identity and access in the enterprise identity provider and productivity suite, including phishing-resistant MFA, consistent SSO, session and sign-on policies, least-privilege administrator roles, and governance of service and non-human accounts.
Implement device trust and conditional access using device-posture tooling, MDM, and EDR across macOS and Windows devices so access depends on device health.
Maintain joiner-mover-leaver integrity by provisioning applications through the identity provider, verifying timely deprovisioning, tracking offboarding exceptions to closure, and completing audit-ready access reviews.
Improve workforce SaaS security through data-export and API controls, session protections, OAuth and connected-app governance, audit-log monitoring, and detection of shadow IT and configuration drift.
Lead incidents limited to the corporate environment as Incident Commander under the company incident response process; coordinate IT, Legal, Compliance, and Communications; investigate and remediate; and run blameless post-incident reviews with tracked follow-ups.
Support incidents involving production, cloud, or customer data with IT expertise when Security leads those incidents.
Establish and maintain workforce AI guardrails, including approved-tool standards, SSO and domain capture, RBAC, retention, logging, access reviews, and new-tool intake through vendor security review.
Develop identity, endpoint, and SaaS-abuse detection use cases with Security and ensure corporate alerts routed to IT have a defined owner and response.
Conduct at least two tabletop exercises with IT, Security, Legal, and Communications, and ensure corporate incidents receive post-incident reviews with follow-ups tracked to completion.
Use AI in triage, investigation, documentation, and automation while maintaining clear human accountability for every decision.
Produce control evidence for SOC 2 and other audits, and communicate technical risk as business impact and decisions across IT, Engineering, Security, Legal, People, and Procurement.

Benefits

Comprehensive health insurance
Dental insurance
Vision insurance
Flexible time off and holidays
401(k) with company match
Disability insurance
Life insurance
Leaves of absence in accordance with applicable state and local laws and regulations and company policy
May be eligible for performance-based bonuses
May be eligible for equity awards