Endpoint Security Engineer — AI, SaaS & Zero Trust

IDT Corporation; San Francisco (CA); On-site; USD 200,000 - 225,000; Full time

Job summary

Hillspire in San Francisco is seeking an experienced Endpoint & SaaS Security Engineer to help build one of the industry’s most advanced security programs. This role protects endpoints and SaaS platforms, maturing Hillspire’s Zero Trust security with emphasis on device posture, insider threat prevention, automation, and AI.

The ideal candidate will investigate alerts, engineer new controls, build automation, and leverage AI to improve operations.

Qualifications

• 5+ years of cybersecurity engineering experience.
• Strong experience securing Windows and macOS endpoints.
• Experience with Managed Detection & Response (MDR).
• Experience implementing Zero Trust security principles.
• Knowledge of insider threat detection techniques.
• Experience with SaaS security.
• Understanding of Shadow IT and SaaS governance.
• Experience supporting BYOD environments.

Responsibilities

• Own the health, configuration, and continuous improvement of Hillspire's endpoint security platform.
• Administer Sophos Endpoint Protection, XDR, and MDR capabilities across all corporate devices.
• Investigate and remediate compromised, vulnerable, or non-compliant endpoints.
• Develop endpoint security baselines aligned with Zero Trust principles.
• Improve device security posture through vulnerability management, compliance monitoring, and hardening.
• Build controls that reduce insider threats and prevent lateral movement.
• Maintain visibility into SaaS applications and govern BYOD, BYO-SaaS, and BYO-AI risks.
• Monitor SaaS security posture and support vendor/security reviews.

Skills

Cybersecurity engineering

Endpoint security

MDR

Zero Trust

Insider threat

SaaS security

BYOD

Tools

Sophos Central

Splunk Enterprise Security

CrowdStrike

Okta

Google Workspace security

CASB or SSPM

Threat Intelligence Platforms

NIST Cybersecurity Framework

CISA Zero Trust Architecture

Job description

Hillspire in San Francisco is seeking an experienced Endpoint & SaaS Security Engineer to help build one of the industry’s most advanced security programs. This role protects endpoints and SaaS platforms, maturing Hillspire’s Zero Trust security with emphasis on device posture, insider threat prevention, automation, and AI.

The ideal candidate will investigate alerts, engineer new controls, build automation, and leverage AI to improve operations.