Senior Enterprise Security Engineer - LLM-Driven Detection

Material Security; Finland; Remote; EUR 199,000 - 217,000; Full time

Job summary

Material Security, a remote-first security company with an SF office, seeks a senior security engineer to own detection and response across corporate telemetry and content. You will lead the design of LLM-driven triage workflows, secure endpoints on a Mac fleet, and govern identity, SaaS, and Google Workspace security while aligning with production deployments.

The role emphasizes collaboration, practical hands-on work, and measurable improvements in detection fidelity and incident response

Qualifications

• 6+ years in corporate security with hands-on SIEM ownership.
• Deep understanding of OAuth, SAML/OIDC, and token lifecycles.
• Experience with Mac fleet management and EDR.
• Experience building or evaluating LLM-driven workflows.
• Collaborative, proactive, engineering-minded.

Responsibilities

• Own detection and response for corporate telemetry and content.
• Design and build the LLM-driven triage agent with real-time review and measured accuracy.
• Manage Mac endpoint EDR and enforce BYOD posture.
• Maintain identity and SaaS access governance and automate reviews.
• Govern Google Workspace security, Apps Script governance, and DLP.
• Bridge corporate and production security with proper logging and just-in-time access.

Skills

SIEM ownership

Python/Go/TS

OAuth/SAML/OIDC

Mac fleet management

LLM-driven workflows

Security product knowledge

Collaboration

Tools

Python

Go

TypeScript

Job description

Material Security, a remote-first security company with an SF office, seeks a senior security engineer to own detection and response across corporate telemetry and content. You will lead the design of LLM-driven triage workflows, secure endpoints on a Mac fleet, and govern identity, SaaS, and Google Workspace security while aligning with production deployments.

The role emphasizes collaboration, practical hands-on work, and measurable improvements in detection fidelity and incident response