Enterprise Security Engineer - R01573019

Brillio; New York (NY); Presencial; USD 120 000 - 130 000; Tempo integral

Resumo da oferta

Brillio, a leading digital technology services provider, seeks an Enterprise Security Engineer in New York. Build secure-by-default environments across SaaS, endpoints, networks and data platforms, advancing security through IAM, AI security, and Infrastructure-as-Code.

You will automate endpoint provisioning, patching and software distribution; manage CI pipelines and deployments; and collaborate with Detection and Response to counter threats like BEC while shaping secure engineering practices

Qualificações

• Experience in security engineering across at least one domain: endpoint security, identity management, AI security, or IaC.
• Proficient in Python or Go for security automation.
• Hands-on Terraform usage including state, modules and CI/CD deployments.
• Experience with endpoint management tools and macOS security at scale.
• Knowledge of SaaS security, identity providers, and LDAP.
• Understanding of SSO, SAML, OAuth, OIDC, DNS protocols.
• Experience with AI security controls and MCP server management.
• Ability to model threats and evaluate third-party risks.

Responsabilidades

• Build Secure-by-Default Environments across SaaS, endpoints, networks and BI platforms.
• Modernize Endpoint Management with identity, security operations and automation.
• Drive GitOps & Infrastructure-as-Code using Terraform and CI pipelines.
• Automate Endpoint Security Lifecycle: provisioning, patching, software distribution.
• Manage AI & MCP Security: guardrails, approved tools, and MCP servers.
• Assess Third-Party & AI Risks: architecture reviews and automate risk reviews.
• Support Security Detection & Response: collaborate on incident workflows and BEC protection.
• Continuously Improve Security Controls and tooling for AI adoption.

Conhecimentos

Endpoint security / IAM / AI security

Python or Go

Terraform & IaC

CI/CD pipelines

Endpoint management tools

SaaS & Identity security

Security protocols (SSO/OIDC)

AI MCP security

Threat modeling & risk assessment

Descrição da oferta de emprego

About Brillio:

Brillio is one of the fastest growing digital technology service providers and a partner of choice for many Fortune 1000 companies seeking to turn disruption into a competitive advantage through innovative digital adoption.Brillio, renowned for its world-class professionals, referred to as "Brillians", distinguishes itself through their capacity to seamlessly integrate cutting-edge digital and design thinking skills with an unwavering dedication to client satisfaction.

Brillio takes pride in its status as an employer of choice, consistently attracting the most exceptional and talented individuals due to its unwavering emphasis on contemporary, groundbreaking technologies, and exclusive digital projects. Brillio's relentless commitment to providing an exceptional experience to its Brillians and nurturing their full potential consistently garners them the Great Place to Work® certification year after year.

Enterprise Security Engineer

Primary Skills

• SAP GRC, Nessus, Information Security & Cybersecurity, Cloud Security, Archer, Metasploit, Wireshark, Burpsuite, AWS Secrets Manager, Nmap, PaaS - Security, CxSAST, Web Application Scanning (WAS), ServiceNow GRC, AppScan

Job requirements

Key Responsibilities

• Build Secure-by-Default Environments: Secure enterprise technologies, including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence platforms.
• Modernize Endpoint Management: Improve endpoint management, identity, and security operations across macOS, iOS, Windows, and Linux environments. Strengthen endpoint security architecture, automation, and control deployment reliability.
• Drive GitOps & Infrastructure-as-Code: Manage endpoint and SaaS security configurations using Terraform, version control, merge requests, CI pipelines, and automated deployments.
• Automate Endpoint Security Lifecycle: Develop automation for secure endpoint provisioning, configuration, patching, and software distribution while maintaining security and compliance standards.
• Manage AI & MCP Security: Establish AI security guardrails for business applications and Model Context Protocol (MCP) servers. Evaluate prompt security, review AI-generated applications, and manage approved AI agents and endpoint tools.
• Assess Third-Party & AI Risks: Evaluate security controls and AI-related risks associated with third-party systems integrated into the enterprise environment. Conduct architecture, design, and process automation reviews.
• Support Security Detection & Response: Partner with the Detection and Response team to develop incident workflows, identify security priorities, and implement solutions to mitigate Business Email Compromise (BEC) threats.
• Continuously Improve Security Controls: Perform regular security assessments of enterprise applications and controls while developing security principles and tools to support organizational growth and AI adoption.

Required Qualifications & Skills

• Security Engineering: Strong practical experience in at least one or more areas, including endpoint security, identity management, AI security, or Infrastructure-as-Code.
• Programming & Automation: Proficiency in Python or Go, with experience developing automation solutions for security operations and infrastructure management.
• Infrastructure-as-Code & GitOps: Hands-on experience with Terraform, including module design, state management, code reviews, version control, and CI/CD pipeline-based deployments.
• Endpoint Management: Experience with endpoint management and security platforms such as Jamf Pro, FleetDM, MDM, or EDR. Strong knowledge of managing and securing macOS environments at scale.
• SaaS & Identity Security: Experience configuring and managing security controls for identity providers and enterprise platforms such as Okta, Google Workspace, and LDAP.
• Identity & Authentication Protocols: Understanding of SSO, SAML, SCIM, OAuth, OIDC, SMTP, and DNS protocols.
• AI & MCP Security: Experience with AI security controls, MCP server management, secure AI integrations, and managing approved AI tools and agents.
• Security Risk Assessment: Ability to conduct threat modeling, security assessments, architecture reviews, and third-party risk evaluations.

Preferred Skills & Attributes

• Experience implementing Data Loss Prevention (DLP), firewall policies, and enterprise security controls.
• Hands-on experience managing Okta integrations, tools, and MCP environments.
• Ability to identify and communicate security vulnerabilities and recommend effective remediation strategies.
• Strong collaboration skills and the ability to guide development teams toward secure engineering practices.
• Ability to work effectively with distributed, remote teams across multiple functions.
• A practical, empathetic, and accountable approach to security engineering.
• Strong interest in continuously learning and adapting to emerging security technologies and threats.

Know more about DI: https://www.brillio.com/services-digital-infrastructure/

Know what it’s like to work and grow at Brillio: https://www.brillio.com/join-us/

Equal Employment Opportunity Declaration

Brillio is an equal opportunity employer to all, regardless of age, ancestry, colour, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding, and related medical conditions), and sexual orientation.

$120,000 - $130,000 a year