Staff Corporate Security Engineer

Skills

About the Role

You'll design and govern security controls for SaaS integrations, API connections and OAuth, build and operate the legal hold and eDiscovery infrastructure with Legal and Compliance, oversee security across the SaaS lifecycle, support endpoint security and vulnerability management, and build scripts and integrations for detection and response.

Requirements

• Experience securing enterprise SaaS environments including integration security, API token management and OAuth governance
• Knowledge of SAML, OIDC, SCIM, X.509
• Experience building or managing eDiscovery and legal hold programs
• Proficiency in Python and/or Go with SaaS API integrations
• Infrastructure-as-code experience such as Terraform and/or Pulumi
• Familiarity with endpoint security for macOS and Windows
• Experience with tools such as Okta, Google Workspace, Salesforce, Workday, NetSuite, Entra, Intune, JAMF, Tines
• 4+ years in security engineering, corporate engineering, IT or related

Responsibilities

• Design, implement and govern security controls for cross-application data flows, API integrations and OAuth connections
• Own the security review lifecycle for new integrations and automate posture monitoring
• Build and operate legal hold and eDiscovery infrastructure
• Provide security oversight across the SaaS application lifecycle
• Support endpoint security policies and vulnerability management
• Develop scripts and integrations to extend visibility for Detection & Response

Benefits

• Equity