Enterprise Security Engineer - R01573019

Brillio; United States; Presencial; USD 120 000 - 170 000; Tempo integral

Resumo da oferta

Brillio in the United States is seeking an Enterprise Security Engineer to design and secure enterprise technologies including SaaS apps, endpoints, and data platforms.

You will modernize endpoint management, drive GitOps and IaC, automate security lifecycles, and establish AI security guardrails while collaborating with cross-functional teams to protect critical business assets and support AI adoption.

Qualificações

• Strong practical experience in at least one area, including endpoint security, identity management, AI security, or Infrastructure-as-Code.
• Proficiency in Python or Go, with experience developing automation solutions for security operations and infrastructure management.
• Hands-on Terraform experience, including module design, state management, code reviews, version control, and CI/CD deployments.
• Experience with endpoint management and security platforms such as Jamf Pro, FleetDM, MDM, or EDR; scale security on macOS.
• Experience configuring identity providers and enterprise platforms such as Okta, Google Workspace, and LDAP.
• Understanding of SSO, SAML, SCIM, OAuth, OIDC, SMTP, and DNS protocols.
• Experience with AI security controls, MCP server management, secure AI integrations, and managing approved AI tools and agents.
• Ability to conduct threat modeling, security assessments, architecture reviews, and third-party risk evaluations.

Responsabilidades

• Build Secure-by-Default Environments: Secure enterprise technologies, including SaaS applications, corporate endpoints, office networks, and BI platforms.
• Modernize Endpoint Management: Improve endpoint management, identity, and security operations across macOS, iOS, Windows, and Linux; strengthen endpoint security architecture.
• Drive GitOps &Infrastructure-as-Code: Manage endpoint and SaaS security configurations using Terraform, version control, MR, CI pipelines, and automated deployments.
• Automate Endpoint Security Lifecycle: Develop automation for provisioning, configuration, patching, and software distribution with security in mind.
• Manage AI & MCP Security: Establish AI security guardrails for business applications and MCP servers; review AI-generated apps and manage approved AI agents/tools.
• Assess Third-Party & AI Risks: Evaluate security controls and AI-related risks for third-party systems; conduct architecture/design automation reviews.
• Support Security Detection & Response: Partner with DR team to develop incident workflows and mitigate BEC threats.
• Continuously Improve Security Controls: Regularly assess enterprise apps and controls; develop security principles and tools to support growth and AI adoption.

Conhecimentos

Security Engineering

Programming & Automation

Infrastructure-as-Code

Endpoint Management

SaaS & Identity Security

Identity & Authentication Protocols

AI & MCP Security

Security Risk Assessment

Ferramentas

Terraform

Jamf Pro

FleetDM

MDM

EDR

Okta

Google Workspace

LDAP

Nessus

Wireshark

Burpsuite

AppScan

Nmap

CxSAST

ServiceNow GRC

Archer

AWS Secrets Manager

Metasploit

WAS - Web Application Scanning

Descrição da oferta de emprego

About Brillio

Brillio is one of the fastest growing digital technology service providers and a partner of choice for many Fortune 1000 companies seeking to turn disruption into a competitive advantage through innovative digital adoption. Brillio, renowned for its world‑class professionals, referred to as "Brillians", distinguishes itself through their capacity to seamlessly integrate cutting‑edge digital and design thinking skills with an unwavering dedication to client satisfaction.

About Brillio

Brillio takes pride in its status as an employer of choice, consistently attracting the most exceptional and talented individuals due to its unwavering emphasis on contemporary, groundbreaking technologies, and exclusive digital projects. Brillio's relentless commitment to providing an exceptional experience to its Brillians and nurturing their full potential consistently garners them the Great Place to Work® certification year after year.

Enterprise Security Engineer

Primary Skills

• SAP GRC, Nessus, Information Security & Cybersecurity, Cloud Security, Archer, Metasploit, Wireshark, Burpsuite, AWS Secrets Manager, Nmap, PaaS - Security, CxSAST, Web Application Scanning (WAS), ServiceNow GRC, AppScan

Job requirements

Key Responsibilities

• Build Secure-by-Default Environments: Secure enterprise technologies, including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence platforms.
• Modernize Endpoint Management: Improve endpoint management, identity, and security operations across macOS, iOS, Windows, and Linux environments. Strengthen endpoint security architecture, automation, and control deployment reliability.
• Drive GitOps & Infrastructure-as-Code: Manage endpoint and SaaS security configurations using Terraform, version control, merge requests, CI pipelines, and automated deployments.
• Automate Endpoint Security Lifecycle: Develop automation for secure endpoint provisioning, configuration, patching, and software distribution while maintaining security and compliance standards.
• Manage AI & MCP Security: Establish AI security guardrails for business applications and Model Context Protocol (MCP) servers. Evaluate prompt security, review AI-generated applications, and manage approved AI agents and endpoint tools.
• Assess Third-Party & AI Risks: Evaluate security controls and AI-related risks associated with third-party systems integrated into the enterprise environment. Conduct architecture, design, and process automation reviews.
• Support Security Detection & Response: Partner with the Detection and Response team to develop incident workflows, identify security priorities, and implement solutions to mitigate Business Email Compromise (BEC) threats.
• Continuously Improve Security Controls: Perform regular security assessments of enterprise applications and controls while developing security principles and tools to support organizational growth and AI adoption.

Required Qualifications & Skills

• Security Engineering: Strong practical experience in at least one or more areas, including endpoint security, identity management, AI security, or Infrastructure-as-Code.
• Programming & Automation: Proficiency in Python or Go, with experience developing automation solutions for security operations and infrastructure management.
• Infrastructure-as-Code & GitOps: Hands-on experience with Terraform, including module design, state management, code reviews, version control, and CI/CD pipeline-based deployments.
• Endpoint Management: Experience with endpoint management and security platforms such as Jamf Pro, FleetDM, MDM, or EDR. Strong knowledge of managing and securing macOS environments at scale.
• SaaS & Identity Security: Experience configuring and managing security controls for identity providers and enterprise platforms such as Okta, Google Workspace, and LDAP.
• Identity & Authentication Protocols: Understanding of SSO, SAML, SCIM, OAuth, OIDC, SMTP, and DNS protocols.
• AI & MCP Security: Experience with AI security controls, MCP server management, secure AI integrations, and managing approved AI tools and agents.
• Security Risk Assessment: Ability to conduct threat modeling, security assessments, architecture reviews, and third-party risk evaluations.

Preferred Skills & Attributes

• Experience implementing Data Loss Prevention (DLP), firewall policies, and enterprise security controls.
• Hands-on experience managing Okta integrations, tools, and MCP environments.
• Ability to identify and communicate security vulnerabilities and recommend effective remediation strategies.
• Strong collaboration skills and the ability to guide development teams toward secure engineering practices.
• Ability to work effectively with distributed, remote teams across multiple functions.
• A practical, empathetic, and accountable approach to security engineering.
• Strong interest in continuously learning and adapting to emerging security technologies and threats.

Know more about DI: https://www.brillio.com/services-digital-infrastructure/

Know what it’s like to work and grow at Brillio: https://www.brillio.com/join-us/

Equal Employment Opportunity Declaration

Brillio is an equal opportunity employer to all, regardless of age, ancestry, colour, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding, and related medical conditions), and sexual orientation.