Lead Security Engineer, Enterprise Security

Klaviyo; Boston (MA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Equity

Sign-on bonus

Comprehensive compensation options

Job summary

Klaviyo is seeking a senior security/infra engineer to secure enterprise systems, from SaaS apps to endpoints, and lead end-to-end cross-functional initiatives. You will design AI‑driven security artifacts and raise engineering standards across security architecture.

职责 include mentoring engineers, managing perimeter controls, and expanding endpoint security with IT and Detection/Response teams.

Qualifications

• 7+ years in security or infra engineering with enterprise domains.
• AI‑first mindset: design with AI and own deployments.
• Hands‑on by default: policy‑as‑code; architecture reviews; prod debugging.
• Terraform for infrastructure‑as‑code across enterprise security.
• AWS cloud security, IAM policies, and secure architectures.
• Experience with IdP solutions such as Okta and AWS Cognito.
• Experience with Cloudflare, Wiz, and CrowdStrike.

Responsibilities

• Secure corporate systems: SaaS apps, IAM, endpoints, Zero Trust, and perimeter security.
• Partner with Engineering, IT, and Security to mature programs and add capabilities.
• Lead hands‑on cross‑functional projects end‑to‑end and set design patterns.
• AI‑first security: design, prototype, and own AI-generated artifacts.
• Mentor engineers and raise technical standards across security architecture.
• Manage Cloudflare WAF policies and other perimeter controls; ensure coverage.
• Expand endpoint security across the fleet with IT and Detection/Response teams.

Skills

Policy-as-code

Security architecture

Hands-on engineering

AI-first mindset

Tools

Terraform

Okta

AWS Cognito

Cloudflare

Wiz

CrowdStrike

Job description

Description

Secure corporate systems: SaaS apps, IAM, endpoints, Zero Trust, and perimeter security. Partner with Engineering, IT, and Security to mature programs and add capabilities. Lead hands‑on cross-functional projects end-to-end and set design patterns. AI‑first security: design, prototype, and own AI-generated artifacts. Mentor engineers and raise technical standards across security architecture. Manage Cloudflare WAF policies and other perimeter controls; ensure coverage. Expand endpoint security across the fleet with IT and Detection/Response teams.

Requirements

7+ years in security or infra engineering with enterprise domains. AI‑first mindset: design with AI and own deployments. Hands‑on by default: policy‑as‑code; architecture reviews; prod debugging. Terraform for infrastructure‑as‑code across enterprise security. AWS cloud security, IAM policies, and secure architectures. Experience with IdP solutions such as Okta and AWS Cognito. Experience with Cloudflare, Wiz, and CrowdStrike.

Benefits

Generous benefits including health, welfare, and wellbeing. Equity, sign-on payments, and comprehensive compensation options. Supportive, AI-forward culture with opportunities to own impactful work.