Endpoint & AI Security Engineer with Zero Trust

Schmidt Entities; San Francisco (CA); On-site; USD 150,000 - 230,000; Full time

Job summary

Hillspire is seeking an experienced Endpoint & SaaS Security Engineer to advance a modern security program in San Francisco. The role focuses on endpoint and SaaS security within a Zero Trust framework, with emphasis on device posture, insider threat prevention, automation, and AI-driven operations.

This hands-on engineering role offers significant ownership and the opportunity to shape security across endpoints, SaaS platforms, and AI initiatives, including RAG-based security ops and automated

Qualifications

• 5+ years of cybersecurity engineering experience.
• Strong experience securing Windows and macOS endpoints.
• Experience with MDR services.
• Experience implementing Zero Trust security principles.
• Knowledge of insider threat detection techniques.
• Experience with SaaS security and Shadow IT governance.
• Experience supporting BYOD environments.

Responsibilities

• Own health, configuration, and continuous improvement of endpoint security platform.
• Administer endpoint protection, XDR, and MDR across corporate devices.
• Ensure 100% endpoint visibility and security coverage.
• Investigate and remediate compromised, vulnerable, or non-compliant endpoints.
• Develop endpoint security baselines aligned with Zero Trust principles.
• Improve device security posture through vulnerability management and hardening.
• Build automated remediation workflows and detection logic.
• Develop documentation, playbooks, and operational procedures.
• Monitor, investigate, and respond to security alerts.

Skills

Endpoint security

SaaS security

Zero Trust

Automation

AI in security

Tools

Sophos Central

Splunk Enterprise Security

CrowdStrike

Okta

Google Workspace security

CASB or SSPM

Threat Intelligence Platforms

Job description

Hillspire is seeking an experienced Endpoint & SaaS Security Engineer to advance a modern security program in San Francisco. The role focuses on endpoint and SaaS security within a Zero Trust framework, with emphasis on device posture, insider threat prevention, automation, and AI-driven operations.

This hands-on engineering role offers significant ownership and the opportunity to shape security across endpoints, SaaS platforms, and AI initiatives, including RAG-based security ops and automated