Sr. Corporate Security Engineer

Cockroach Labs•New York, NY

2d•$131,000 - $174,100•Hybrid

About The Position

Cockroach Labs is looking for a Senior Corporate Security Engineer to help protect our endpoints, cloud platforms, internal applications, and enterprise SaaS environment. This is a hands-on, cross-functional role with a particular focus on AI governance, data protection, and corporate security operations. You’ll help shape how Cockroach Labs securely adopts AI tools and agents, strengthen our DLP and SaaS security controls, and lead security initiatives from design through implementation. We’re looking for a well-rounded security engineer who can balance strong security practices with the needs of the business. You should be comfortable working across IT and security systems, partnering with teams throughout the company, and navigating emerging risks in a rapidly changing AI landscape. This role offers the opportunity to take meaningful ownership of our corporate security program while working on a wide range of high-impact projects. To be eligible for this role, you must be based in the NYC area.

Requirements

5+ years of experience in corporate security, security operations, IT security, or a related field.
Experience owning a security program, major initiative, or complex cross-functional project.
Hands-on experience with DLP, CASB, or SaaS security tools, including creating and tuning policies.
Experience securing cloud-hosted applications and corporate IT environments.
A strong understanding of identity and access management, endpoints, email, file-sharing systems, networks, and enterprise SaaS applications.
Familiarity with the security and data risks associated with AI tools, applications, agents, and integrations.
Experience conducting risk assessments, gap assessments, or threat modeling.
Strong project management, communication, and cross-functional collaboration skills.

Nice To Haves

Experience building AI governance controls or securing AI applications and agents.
Experience with Netskope, Zscaler, GCP, Okta, Google Workspace, CrowdStrike Falcon, or similar technologies.
Experience with SIEM, SOAR, and security automation tools such as Tines or Python.
Previous experience in IT support or systems administration.
Familiarity with frameworks such as NIST, SOC 2, ISO 27001, GDPR, or CIS Critical Controls.
Experience using AI development tools such as Claude Code or Cursor.
Relevant security certifications, such as Security+, CISSP, or CCSP.

Responsibilities

Help build and manage our AI governance program, including security controls for AI tools, agents, MCP connections, and data flows.
Develop and secure internal applications hosted on GCP, including our internal LLM gateway.
Design and maintain DLP, data classification, and governance controls that protect sensitive data while enabling the business.
Administer and optimize CASB and SaaS security controls across cloud applications.
Assess security risks for internal applications, AI use cases, and third-party tools.
Monitor and respond to security alerts and incidents across email, endpoints, SaaS applications, and cloud environments.
Identify and reduce risks related to Shadow IT, Shadow AI, and SaaS sprawl.
Build automations that improve security visibility, response, and operational efficiency.
Partner with IT, Legal, Compliance, and Security teams on access management, endpoint security, regulatory requirements, and third-party risk.
Lead corporate security projects from design through implementation.