Senior Corporate Security Engineer

Huntress

6h•$130,000 - $150,000•Remote

About The Position

As a Senior Corporate Security Engineer, you will join the IT Solutions Engineering team, working side-by-side with Systems Engineers, Business Systems Analysts, and Automation Engineers. Your mission is to ensure that the technology solutions we build to enable the business are scalable, resilient, and secure by design. You will serve as the security subject-matter expert within this multidisciplinary team. Your goal is not to police others' work, but to embed security best practices directly into our IT operations. You will create defenses for our workstations and identities. You will teach your peers about security basics to encourage a 'security-first' culture. You will also act as a technical escalation point for the internal CIRT. This applies to incidents related to IT-supported systems, including workstations, SaaS, and identity.

Requirements

Bachelor's degree in Computer Science, Information Technology, or relevant security certifications (CISSP, GIAC, etc.), or equivalent practical experience.
5+ years of experience in Information Security or IT Engineering with a strong focus on securing a fully remote workforce and system hardening.
Deep expertise in Microsoft Intune for configuration management and security baselines.
Proficiency in Entra ID (Azure AD) security, including Conditional Access, Identity Protection, and OIDC/SAML integrations.
Experience securing SaaS ecosystems (Google Workspace, Slack, Salesforce, etc.).
You thrive in a fully remote environment and recognize that organization is key to success. You believe "it isn't done until it's documented" and produce clear, maintainable guides because you know documentation is the lifeline of asynchronous collaboration.
You thrive in a cross-functional environment. You know how to work with Automation Engineers and Business Analysts to build solutions that are both secure and efficient.
A proven ability to explain complex security concepts to technical peers in IT. You enjoy teaching others and enabling teams to be self-sufficient in security matters.
Experience taking a security project, such as rolling out a new control or hardening a system, from design to full deployment, ensuring all stakeholders are informed and aligned.

Responsibilities

Proactive Security Process Design: Build on and establish new security processes in partnership with the IT Solutions Engineering team. You will lead the shift from reactive measures to proactive defense, identifying potential risks in our workflows and designing scalable, secure-by-default processes that prevent issues before they arise.
Workstation Security Design: Design and verify security configurations for our workstation fleet (Windows and macOS) and mobile devices. Collaborate with IT Systems Engineers to ensure Intune policies are effective without disrupting the user experience or business workflows.
Email Security Defense: Manage and refine our email security systems to protect against phishing, spam, and malware. You will tune policies, manage quarantine flows, and maintain authentication standards (SPF, DKIM, DMARC) to ensure our communications remain secure and reliable.
Identity & Access Defense: Act as the subject matter expert for Entra ID. Design conditional access policies, enforce MFA standards, and ensure "least privilege" access is maintained across our identity infrastructure.
Secure SaaS Implementation: Lead the security review process for new and existing SaaS applications. Partner with Business Systems Analysts to establish baselines for third-party integrations and help the team understand how to configure tools securely by default.
Education & Partnership: Actively mentor and educate all of IT and business system support teams on security best practices. Create documentation and run knowledge-sharing sessions to help your peers spot risks and make secure decisions autonomously.
Incident Escalation (IT Systems): Act as the primary technical escalation point for the internal CIRT regarding IT-managed assets. You will partner with the team to investigate potential compromises on employee workstations, analyze Entra ID sign-in logs, and resolve security incidents on SaaS accounts.
Vulnerability Remediation: Collaborate with Automation and Systems Engineers to prioritize patching utilizing a risk-based approach. You will help the team understand the severity of vulnerabilities and assist in testing remediation paths.