Remote Corporate Security Engineer - Identity & Access

Dfns; New York, San Francisco (NY, CA); Hybrid; USD 150,000 - 250,000; Full time

Benefits offered by this job

Health insurance

Stock options

Flexible vacation

Parental leave

Home technology allowance

MacBook provided

Job summary

DFNS is hiring a Staff Corporate Security Engineer to own corporate security across the US, Europe, and Asia in a remote-first setup with offices available. You will implement identity, access controls, and endpoint security while building robust detection, response, and audit readiness.

You will work with Infrastructure and Product Security to ensure secure boundaries, drive awareness, and maintain our compliance posture across SOC 1, SOC 2, and ISO 27001 frameworks.

Qualifications

• Hands-on corporate security experience building and running controls.
• Deep IAM expertise: SSO, MFA, passkeys, device trust, automated access lifecycle.
• Endpoint and SaaS security in practice: MDM, EDR, Google Workspace administration.
• Experience building detection and running incident response for corporate systems (SIEM or equivalent).
• Clear writing for auditors and engineers to read the same document.

Responsibilities

• Own identity and access across the company (SSO, MFA, passkeys, device trust, automated joiner/mover/leaver) to prove who has access to what.
• Harden and manage endpoints and the SaaS estate (MDM, EDR, Google Workspace).
• Build detection and response for corporate systems from logging to runbooks; lead the response.
• Run asset inventory and vulnerability management with automation.
• Maintain SOC 1/2, ISO 22301 and related controls and audits across the estate.
• Design security awareness and phishing resilience for staff as the first line of defense.
• Collaborate with Infrastructure and Product Security to keep corporate boundaries explicit.

Skills

Identity & access

Endpoint security

Incident response

Automation scripting

SOC 2 / ISO 27001

Job description

DFNS is hiring a Staff Corporate Security Engineer to own corporate security across the US, Europe, and Asia in a remote-first setup with offices available. You will implement identity, access controls, and endpoint security while building robust detection, response, and audit readiness.

You will work with Infrastructure and Product Security to ensure secure boundaries, drive awareness, and maintain our compliance posture across SOC 1, SOC 2, and ISO 27001 frameworks.