Senior Corporate Security Engineer

Charlie Health

18h • $180,000 - $240,000

About The Position

The Senior Corporate Security Engineer designs, builds, and operates technical security systems and controls that protect Charlie Health’s corporate environment, workforce systems, endpoints, SaaS platforms, cloud-connected services, and internal operations. This is a hands-on senior engineering role spanning enterprise security, identity and access management, endpoint and SaaS security, data protection, automation, cloud security, and detection engineering. The role works closely with IT Engineering, Information Security, Compliance, Engineering, and business teams to reduce risk, mature controls, and support organizational growth.

The position focuses on scalable, reliable, measurable, and secure-by-design capabilities that protect sensitive company, employee, clinician, and patient data while enabling the business to operate safely. It also helps secure enterprise adoption of AI tools, LLM platforms, AI-enabled workflows, and emerging AI security products. The role supports controls aligned with HIPAA, SOC 2, NIST, Zero Trust principles, and other applicable regulatory and contractual requirements. The position may be performed in-office or remotely.

Requirements

• At least 5 years of experience in security engineering, corporate security, infrastructure security, enterprise security, IT security, cloud security, or a related technical discipline.
• Deep hands-on experience designing, building, and operating technical security controls in enterprise environments.
• Experience securing identity, endpoints, SaaS platforms, collaboration tools, cloud-connected services, and internal systems.
• Strong experience with identity and access management concepts, including MFA, conditional access, privileged access, lifecycle automation, service accounts, and least privilege.
• Experience with security tools such as MDR platforms, EDR, SIEM, cloud security, endpoint management, vulnerability management, or DLP systems.
• Experience with security platforms and telemetry sources such as Expel MDR, SentinelOne, Wiz, CloudTrail, Sumo Logic, or similar tools.
• Experience with endpoint security, MDM, secure configuration management, and vulnerability remediation across Mac, Windows, or mobile environments.
• Experience using scripting, APIs, or automation tools such as Python, Bash, PowerShell, Workato, Terraform, REST APIs, webhooks, or JSON.
• Familiarity with detection engineering, alert tuning, incident response workflows, and security operations processes.
• Strong understanding of Zero Trust principles, identity-centric security, least privilege, device trust, and secure system design.
• Ability to work cross-functionally with IT, Security, Engineering, Compliance, and business stakeholders.
• Strong documentation, ownership, judgment, and ability to work independently in ambiguous environments.

Nice To Haves

• Experience operating at a Staff Engineer or senior technical leadership level.
• Experience in healthcare, financial services, or other regulated environments.
• Experience supporting HIPAA, SOC 2, NIST, ISO 27001, or similar security and compliance frameworks.
• Experience securing enterprise AI tools, LLM platforms, AI agents, or AI-enabled workflows.
• Exposure to AI platforms and security tools such as OpenAI, Anthropic, LiteLLM, Prompt Security, Pillar, or similar technologies.
• Experience with DLP, CASB, SSPM, browser security, SaaS posture management, or data discovery tools.
• Experience securing Google Workspace, Okta, Jamf, Microsoft Intune, GitHub, Slack, Atlassian, AWS, or similar enterprise platforms.
• Experience building automations using REST APIs, webhooks, JSON, service accounts, and API authentication patterns.
• Experience partnering with managed security providers, MDR teams, external auditors, or compliance teams.
• Familiarity with AI security risks, including sensitive-data exposure, prompt injection, model access control, third-party plugin risk, and AI system logging.

Responsibilities

• Design, build, and operate technical security controls across the corporate technology environment.
• Engineer scalable security solutions for identity, endpoints, SaaS platforms, cloud-connected services, collaboration tools, and internal systems.
• Translate security requirements into technical controls, automations, detections, and operational workflows.
• Partner with IT Engineering to embed secure-by-design practices into enterprise systems, integrations, and infrastructure.
• Establish control patterns that improve security posture, operational efficiency, auditability, and resilience.
• Design and improve identity and access controls, including MFA, conditional access, device trust, role-based access, least privilege, service accounts, and lifecycle automation.
• Improve joiner, mover, leaver, access review, and elevated access processes with IT and business teams.
• Advance Zero Trust through identity-centric control design, continuous verification, and measurable trust signals.
• Improve security across Mac, Windows, mobile, and BYOD environments, including secure configuration, MDM, EDR, device compliance, and vulnerability remediation.
• Assess and improve corporate SaaS platforms, integrations, APIs, and service-account security; configure and operationalize relevant security tools.
• Support cloud security visibility and control implementation across AWS and related services, including CloudTrail and other telemetry sources.
• Build and improve detections, alerts, dashboards, runbooks, and response workflows; partner with Expel MDR and internal teams to improve telemetry, alert fidelity, investigations, and response.
• Support investigation and response for identity, endpoint, SaaS, email, cloud, data exposure, and corporate security events.
• Tune security tools to reduce noise and improve signal quality and confidence in control effectiveness.
• Develop repeatable incident-readiness playbooks and operating procedures.
• Secure the organization’s use of AI tools, LLM platforms, AI agents, and AI-enabled workflows; evaluate controls for data protection, prompt-layer security, access governance, logging, and usage monitoring.
• Partner with IT, Security, Compliance, and business teams to define practical security patterns for AI platforms and products.
• Assess AI-related risks such as sensitive-data exposure, PHI leakage, model access, third-party integrations, and AI-enabled automation; translate emerging developments into practical improvements.
• Design and operate controls that protect PHI, employee and clinician data, and sensitive company information; support DLP across SaaS, endpoints, browsers, collaboration tools, email, cloud services, and AI systems.
• Improve visibility into sensitive-data movement, sharing patterns, and policy violations, and build automations and reporting for DLP response, control monitoring, and evidence collection.
• Build automations for security operations, access management, control monitoring, remediation, and audit evidence collection using APIs, scripting, webhooks, workflow platforms, and infrastructure-as-code practices.
• Develop maintainable security workflows with tools and languages such as Python, Bash, PowerShell, Workato, Terraform, REST APIs, and JSON.
• Apply version control, code review, documentation, testing, and repeatable deployment practices; simplify processes while improving reliability and measurable outcomes.
• Implement and maintain controls supporting HIPAA, SOC 2, NIST, ISO 27001, and other applicable frameworks.
• Support audit evidence collection, control testing, remediation planning, and continuous control monitoring.
• Identify and document security risks, partner with stakeholders on remediation, translate requirements into practical engineering solutions, and help define metrics for control health, posture, maturity, and risk reduction.

Benefits

• Comprehensive benefits for all full-time employees.
• Depending on the position, the total compensation package may include stock options and other Charlie Health-sponsored benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed