Corporate Security Engineer

Nexthink; Bengaluru Urban; On-site; INR 3,500,000 - 7,000,000; Full time

Benefits offered by this job

Madrid hub

Cloud-native tech stack

Impactful work

Job summary

Nexthink seeks a Senior Corporate Security Engineer to own the security of its internal environment and lead detection and response for a global SaaS ecosystem. You will architect the security fabric, enable passwordless identity, and secure endpoints, servers, and cloud workloads across Windows, macOS, Linux, and mobile platforms.

You will partner with IT, HR, and cloud security teams to enforce least-privilege access, automate remediation, and drive security improvements while communicating

Qualifications

• 8–15 years of hands-on corporate security experience.
• Experience hardening operating systems (macOS/Windows) and managing security via MDM/UEM.
• Proficiency in Python and Terraform for automating APIs and security workflows.
• Security Ops with EDR/SIEM log analysis and threat hunting.
• Excellent English communication to explain risks to non-technical stakeholders.

Responsibilities

• Design and support passwordless authentication and Zero Trust principles.
• Manage provisioning and lifecycle management with least-privilege access across business systems.
• Coordinate onboarding/offboarding workflows with timely access revocation and auditability.
• Define and enforce security baselines for endpoints (Windows/macOS) and mobile devices via MDM.
• Tune EDR/XDR solutions for high-fidelity detection on workstations and servers.
• Secure the corporate Azure footprint and cloud configurations separate from production environments.
• Identify and mitigate security risks; conduct regular assessments and vulnerability scans.
• Coordinate vulnerability and patch management; automate endpoint compliance checks.
• Collaborate with IT to automate security workflows.
• Develop automation scripts (Python/PowerShell) and SOAR workflows to automate tasks.
• Lead incident response for phishing, malware, lost devices; hunt threats.
• Design and deliver technical security training and awareness campaigns.

Skills

Security engineering

Python scripting

Terraform

PowerShell

EDR/XDR

SIEM

Vulnerability management

Zero Trust

MDM/UEM

Cloud security

English communication

Tools

Okta

Microsoft Entra ID

Azure/AWS security

Job description

Nexthink is the leader in digital employee experience management software. The company provides IT leaders with unprecedented insight allowing them to see, diagnose and fix issues at scale impacting employees anywhere, with any application or network, before employees notice the issue. As the first solution to allow IT to progress from reactive problem solving to proactive optimization, Nexthink enables its more than 1,300 customers to provide better digital experiences to more than 18 million employees. Dual headquartered in Lausanne, Switzerland and Boston, Massachusetts, Nexthink has 9 offices worldwide.

Job Description

As a Senior Corporate Security Engineer at Nexthink, you will be responsible for the security of our internal environment. You won't just be monitoring logs; you will be architecting the security fabric that enables our rapid growth.

Working in close partnership with IT, business teams and, partnering with our Cloud and Application Security teams, you will secure the identity, devices, and applications used by "Nexthinkers" worldwide. You will own the security of a complex SaaS ecosystem, and lead detection and response for the corporate environment.

What You Will Do

Identity-Centric Security Architecture

• Contribute to the design and support the implementation of passwordless authentication and Zero Trust principles.
• Manage secure provisioning and lifecycle management, ensuring least-privilege access across all business systems.
• Partner with HR and IT to streamline onboarding/offboarding workflows, ensuring timely access revocation and auditability.
• Define and enforce security baselines for our diverse fleet of endpoints (Windows, macOS) and mobile devices via MDM (Intune/Jamf).
• Manage and tune EDR/XDR solutions to ensure high-fidelity detection on workstations and servers (Windows, Linux, macOS).
• Secure the corporate Azure footprint, ensuring proper configuration of subscriptions, networking, and resources distinct from our production product environment.
• Proactively identify and mitigate security risks in our corporate environment, conducting regular security assessments and vulnerability scans.
• Coordinate vulnerability management and patch management
• Collaborate with IT to automate endpoint compliance checks and remediation workflows.

Security Engineering

• Support the development and maintenance of Infrastructure-as-Code.
• Ensure hardening and compliance of endpoints and servers.

SaaS Security & Integration

• Collaborate with Legal and Compliance to vet new vendors and tools.
• Configure and maintain CASB and DLP policies to safeguard sensitive corporate data without hindering productivity.

Detection, Response & Automation

• Lead incident response activities for corporate security events (phishing, malware, lost devices).
• Develop automation scripts (Python/PowerShell) and workflows (SOAR) to automate manual security tasks, evidence collection, and response actions.
• Proactively hunt for threats within the corporate network and identity providers.
• Develop incident response playbooks including technology specific procedures and forensics collection

Audits and Compliance

• Design and implement security controls to safeguard corporate resources, including endpoints, data storage, networking, computing and identity and access management.
• Support and automate evidence collection for audits.
• Act as the primary security liaison to the IT Department and business teams, helping them build security into their operations (DevSecOps for IT).
• Design and deliver technical security training and awareness campaigns for engineering and business teams.

Qualifications

• 8-15 years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment.
• Endpoint Mastery: Experience hardening operating systems (macOS/Windows) and managing security via MDM/UEM tools.
• Vulnerability management: Proven experience in helping IT and business teams patching systems and infrastructures.
• Coding Skills: Proficiency in Python and Terraform for automating APIs and security workflows.
• Security Ops: Proven experience with EDR tools and SIEM log analysis.
• Communication: Fluent in English with the ability to explain complex risks to non-technical stakeholders.
• Proven ability to influence and drive security best practices across non-security teams.
• Experience with security awareness training platforms and phishing simulation tools.

Bonus Points

• Identity Expertise: Deep technical knowledge of Okta and Microsoft Entra ID (Authentication policy, Conditional Access, SSO, SCIM, OIDC/SAML).
• Experience implementing FIDO2/WebAuthn (Passwordless).
• Proficient in PowerShell.
• Familiarity with compliance standards (ISO 27001/27701, SOC 2, FedRAMP)
• Experience securing Cloud Infrastructure (Azure/AWS) specifically for internal/corporate workloads.

Why Join Nexthink Security?

• Impact: You will report directly into the CISO organization and have a tangible impact on the daily lives of employees and the safety of the company.
• Opportunity to work on cutting-edge security projects, with visibility and support from executive leadership.
• Technology: We use top-tier security stacks. You won’t be fighting with legacy on-premise hardware; we are cloud-native.
• Culture: We value "Security as an Enabler," not a blocker. You will work in a supportive, highly technical environment in our Madrid hub