Senior Enterprise Security Engineer (LLM-Driven, Remote)

Material Security; Spanien; Remote; EUR 199.000 - 217.000; Vollzeit

Zusammenfassung

Material Security is seeking an experienced security leader to own Detection and Response, build LLM-driven workflows, and harden our corporate stack across identity, endpoints, and SaaS. You will drive cross-functional improvements and act as customer zero, collaborating closely with Engineering to turn findings into product enhancements.

You will champion measuring fidelity, reducing noise, and ensuring rapid containment while guiding the team through incident response and playbook ownership.

Qualifikationen

• Minimum 6+ years in corporate security with hands-on SIEM, detection content and IR.
• Strong Python, Go, or TS experience with vendor APIs and automation.
• Deep understanding of OAuth, SAML/OIDC, and cloud IAM concepts.
• Experience managing a modern Mac fleet, EDR, and MDM at scale.

Aufgaben

• Detection and Response: own telemetry, close gaps, reduce noise, and lead incident response.
• LLM-Driven Triage: design an agent to review privileged access and alerts with measured precision.
• Endpoint: device management and EDR; enforce BYOD posture.
• Identity and SaaS: maintain phishing-resistant authentication and automate access reviews.
• Google Workspace: admin alerting, OAuth governance, Apps Script governance, DLP.
• Corporate to Production: ensure detections cross the boundary with just-in-time access.

Kenntnisse

Operator depth

Software engineering

Identity fundamentals

Endpoint fluency

LLM judgment

Software development

Collaborative work

Jobbeschreibung

Material Security is seeking an experienced security leader to own Detection and Response, build LLM-driven workflows, and harden our corporate stack across identity, endpoints, and SaaS. You will drive cross-functional improvements and act as customer zero, collaborating closely with Engineering to turn findings into product enhancements.

You will champion measuring fidelity, reducing noise, and ensuring rapid containment while guiding the team through incident response and playbook ownership.