Senior Security Engineer (Remote, EU/CET)

Maze; Ireland; Remote; EUR 110,000 - 140,000; Full time

Benefits offered by this job

Health insurance with international

Life and Disability Insurance

Flexible time off

Meaningful equity

Remote work setup fund

New MacBook

Paid Family leave

Dependent health insurance stipend

Job summary

Maze is hiring a Senior Security Engineer to own security across IT and cloud at scale. You will lead identity, SSO, device management, and automate joiner/mover/leaver flows, while shaping security control across AWS, GCP, Kubernetes, and SaaS environments.

You’ll report to the Senior Manager, Platform Engineering, collaborate across Maze, and use AI-assisted workflows to reduce manual work and improve incident responses. This role offers a remote-first setup and strong benefits.

Qualifications

• Strong software, infrastructure or security engineering background with coding/infra-as-code
• Experience owning identity, MDM and joiner/leaver automation at a remote company
• Experience securing modern AWS or GCP environments and explaining IAM trade-offs
• Experience with vulnerability management or access reviews in externally audited environments
• Familiarity with SOC 2 or ISO 27001 controls and turning controls into automated checks
• Interest in AI-assisted development and using AI tools in security workflows

Responsibilities

• Own identity and SSO in Google Workspace, including provisioning and MFA policies
• Run our macOS fleet management and security patching
• Automate joiner/mover/leaver flows to provision/new hires and remove access quickly
• Own SaaS licensing and app provisioning with automation and self-service
• Manage security controls across AWS, GCP, Kubernetes and SaaS environments
• Lead vulnerability management end-to-end from findings to remediation with SLAs
• Conduct regular access reviews and generate audit evidence for compliance
• Contribute security perspectives to incidents and post-incident reviews
• Leverage AI-assisted workflows to reduce manual work and speed investigations

Skills

Identity & SSO

Automation

IAM governance

Vulnerability mgmt

SOC 2 / ISO27001

AI tooling

Tools

AWS

GCP

Kubernetes

Terraform

Docker

GitHub Actions

Argo CD

Rippling

Iru

Job description

About Maze

Maze is the user research platform that helps companies build the right products faster by making user insights available at the speed of product development.

In most companies, research demand far exceeds supply. Time, cost, and lack of access to expertise hold teams back. In today’s AI-powered world, anyone can build a product fast. The real challenge? Deeply understanding user needs and building the right product. That’s where Maze comes in.

We believe companies shouldn’t have to choose between building fast and building right. Maze makes research accessible, intuitive, and fast so product teams can put user insights at the center of every decision.

Our platform enables researchers, designers, and product managers to quickly recruit participants, run studies autonomously, and surface insights that actually drive product decisions. Our AI capabilities automate the busywork and add depth and direction to the insights themselves.

That’s why Maze was recently named the #1 user research platform in UX Tools’ Design Tools Survey — and why we’re scaling fast across industries like B2B SaaS, e-Commerce, Financial Services, Retail, and Automotive, supporting world class customers such as Uber, Amazon, Atlassian, Anthropic & more.

Maze is a Series B company backed by top-tier investors (Felicis, Emergence & Amplify). We operate a global remote workforce driven by our core values.

Senior Security Engineer

Location: Remote, preference for Netherlands, United Kingdom, Ireland, Spain or Portugal. Key engineering and product teams are based in these locales.

About the Role

We’re hiring a Senior Security Engineer to take the lead on security at Maze. You’ll own two closely connected areas:

• The corporate IT foundation every Maze employee relies on

• The security controls that keep our cloud, code and SaaS environment secure and auditable

Identity, devices and access sit right at the intersection of IT and security. This is an opportunity to own that space end to end. Your job is to automate the IT side so well that most of your time goes to corporate security engineering. You own the budget and tooling to automate the IT layer, and the helpdesk scope stays deliberately small, so the role stays an engineering role.

You’ll report to our Senior Manager, Platform Engineering and work closely with teams across Maze.

As a Senior Security Engineer at Maze, you will:

• Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA and access policies

• Run our macOS fleet through Iru, including enrolment, configuration, patching and compliance

• Automate joiner, mover and leaver flows from Rippling so new hires are fully provisioned on day one and leavers lose access within hours

• Own SaaS licensing and app provisioning, while keeping internal support lightweight through automation and self-service

• Own security controls across AWS, GitHub, Kubernetes and our SaaS environment, including role based access, IAM hygiene, cloud guardrails, network boundaries and secrets management

• Run vulnerability management end to end, taking findings from Intruder, Socket and pentests through remediation and verification with clear owners and SLAs

• Run regular access reviews and generate audit evidence through Vanta, making compliance thorough, timely and low effort

• Bring a security perspective to incidents and post-incident reviews, turning what we learn into stronger controls

• Use AI-assisted and agentic workflows to reduce manual work and investigate issues faster

What you won’t own

Application code review and threat modelling, sales questionnaires, customer security calls or other customer-facing security work. These sit with our Senior Manager, Platform Engineering today and will move into the Infosec function as business needs grow.

What we’re looking for

• You have a strong software, infrastructure or security engineering background and are comfortable using code and infrastructure as code to automate repetitive work

• You’ve owned identity, MDM and joiner and leaver automation at a remote company and can speak to the impact your automation had

• You’ve secured a modern AWS or GCP environment and can explain the trade-offs behind your IAM decisions

• You’ve run vulnerability management or access reviews in an environment with external audits

• You have experience with SOC 2 or ISO 27001 controls and know how to turn a control into an automated check

• You care about the employee experience and are comfortable saying no when needed while providing context and a better path forward

• You’re excited about AI-assisted development and actively use modern AI tools in your work

Our stack

• Identity and people systems: Google Workspace, Rippling

• Devices: Iru (formerly Kandji), macOS

• Cloud and infrastructure: AWS, GCP, Kubernetes, Terraform, Docker

• Security and compliance: Vanta, Intruder, Socket, Datadog Security, Riot

• Network: Cloudflare Zero Trust

• CI/CD: GitHub Actions, Depot CI, Argo CD

• Observability: Datadog

• Collaboration: Slack, Notion, Linear, GitHub, Zoom

• Application: TypeScript, Node.js, React

You don’t need experience with every technology in our stack. We care more about strong fundamentals, an engineering approach to both IT and security and excitement about making Maze secure by default as we scale.

Inclusivity and Pay

At Maze, we are dedicated to building an equitable, inclusive, and authentic workspace. Unique and diverse perspectives are welcomed, and continuous growth is encouraged. We believe that people are more than their resumes, so if your past experience looks different than the criteria listed, we'd still love to hear from you. We appreciate and celebrate non-traditional life routes and encourage you to apply should you connect with a job description or the Maze culture.

Maze values transparency and it enables us to approach compensation equitably across the world. We are informed by data and regularly check our salary ranges (either United States or Rest of World) against other venture backed companies. Additionally, we are proud of our holistic and generous benefits offerings, included in every compensation package.

Your salary is dependent upon many factors, including years of experience, expertise, etc. During your first interview, you can expect to have an open conversation with your recruiter regarding your compensation expectations.

Why Maze is unique

• Early-stage startup: You will join an early-stage startup with less than 150 team members. This means you'll have the unique opportunity to directly impact success and help shape the future of Maze.

• Market disruption: We believe that the way companies build products is fundamentally broken and the user research market is ripe for disruption. For too long, companies have been forced to choose between rapid development without user insights or investing months into research before bringing products to market. But there's finally a groundswell building around a path forward that eliminates this compromise - and Maze is leading the charge.

• Product-market Fit: Maze is used by 100,000+ brands across 4,000 companies, from SMB to enterprises, and in the last fiscal year, we saw 6.5M questions answered, supporting 25K decisions

Benefits

• Health insurance with international coverage, vision, and dental: 100% of the team member premium paid

  • For some locations, coverage options vary, please see our benefits pages for more information

• Free access to proper mental health care, unlimited virtual therapy sessions (with a human) and 24/7 access to resources

• Life and Disability Insurance, 100% of the team member premium paid

• Flexible time off

• Meaningful equity

• Company retreats, fully paid for by Maze

• New MacBook (laptop), paid for by Maze

• Paid Family leave: 16 weeks for birth or adoptive parents

• $500/month to be used for dependent health insurance coverage

  • If you don't have dependents to add to your plan, you will still get access to this money to be used at your discretion to get the benefits that matter to you with our flexible a-maze-ing benefits - gym memberships, co-working spaces, food, travel, whatever!

• $1,500 remote work setup fund to ensure you can set up a productive work space

• Flexible work schedule where you manage your own working hours

• Monthly Bonus.ly points that are awarded to others to recognize teamwork, dedication and helpfulness - points can be cashed out for gift cards and more

• Virtual social engagements randomly throughout the year

• SWAG, we have some really cool swag

• Open, transparent culture that includes virtual: coffee chats, bi-weekly all-hands meetings, and more

Check out all of our a-maze-ing benefits here.

Outreach Notice

We understand you might be excited about the job you’re applying for, we are excited you are interested! However, please refrain from reaching out to our current team members on LinkedIn for referrals. Our policy is that referrals can only be provided by team members who personally know the candidate. With the high volume of interest in our roles, contacting our team members who are not involved in recruitment can be overwhelming. Additionally, please avoid submitting support tickets regarding your application, as our support team is not involved in the hiring process. Rest assured, our recruitment team is diligently reviewing all applications and will reach out directly if there is a match.