Security Architecture Lead — Vulnerability & Incident Response

Navan; United States; On-site; USD 140,000 - 200,000; Full time

Job summary

Navan is seeking a Senior Enterprise Security Engineer to architect and advance our security posture across a cloud-native environment. This hands-on role safeguards our infrastructure, data, and global user base while driving vulnerability management, detection tuning, and incident response.

You will partner with Engineering, IT, and Compliance to embed security early in projects, enforce least privilege, and push for measurable improvements through KPIs.

Qualifications

• 5+ years of hands-on information or enterprise security experience.
• Experience designing or maturing an enterprise vulnerability management program.
• Incident response experience with on-call rotation.
• Knowledge of attacker TTPs, CVSS, EPSS, KEV, and risk prioritization.
• Ability to translate vulnerabilities into business context for stakeholders.
• Ability to review SIEM/EDR/XDR outputs and tune rules.

Responsibilities

• Architect, manage, and scale the end-to-end vulnerability management program.
• Participate in on-call rotation and lead post-incident reviews.
• Tune SIEM/EDR/XDR and optimize detection to reduce noise.
• Define and enforce Zero Trust and identity governance across the enterprise.
• Strengthen email security and automate responses to threats.
• Collaborate with Engineering, IT, and Compliance to embed security early in the lifecycle.
• Establish KPIs for vulnerability management and incident response; drive continuous improvement.

Skills

Vulnerability management

Incident response

Detection optimization

Zero Trust

Identity governance

Access management

Email security

SOAR workflows

On-call rotation

CIEM/TFM security

Tools

Tenable

Qualys

Rapid7

Wiz

Phantom

Demisto

XSOAR

Okta

Ping

Azure AD

Material Security

Job description

Navan is seeking a Senior Enterprise Security Engineer to architect and advance our security posture across a cloud-native environment. This hands-on role safeguards our infrastructure, data, and global user base while driving vulnerability management, detection tuning, and incident response.

You will partner with Engineering, IT, and Compliance to embed security early in projects, enforce least privilege, and push for measurable improvements through KPIs.