Senior Corporate Security Engineer

Cockroach Labs; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive Health Insurance Coverage

Paid Parental Leave

Flexible PTO

Learning & Development

Relocation Support

Employee Referral Bonus

Job summary

Cockroach Labs is seeking a Senior Corporate Security Engineer to protect endpoints, cloud platforms, internal applications, and enterprise SaaS environments. The role emphasizes AI governance, data protection, and security operations, with ownership of security initiatives from design through implementation.

You will work across IT and security teams, shaping how AI tools are securely adopted, strengthening DLP and SaaS security controls, and leading programs from day one through execution.

Qualifications

• 5+ years of experience in corporate security, security operations, IT security, or related field.
• Experience owning a security program or major initiative.
• Experience securing cloud-hosted applications and corporate IT environments.
• Experience with DLP, CASB, or SaaS security tools; policy creation and tuning.
• Familiarity with AI tools, integrations, and governance controls.
• Knowledge of IAM, endpoints, email, file sharing, networks, and enterprise SaaS apps.
• Experience with SIEM, SOAR, and security automation tools.

Responsibilities

• Protect endpoints, cloud platforms, internal apps, and enterprise SaaS environment.
• Lead security initiatives from design to implementation.
• Develop and enforce AI governance controls and data protection measures.
• Monitor security alerts and incidents across email, endpoints, SaaS, and cloud environments.
• Collaborate with IT, Legal, Compliance, and Security teams on access management and third-party risk.
• Drive projects from concept through delivery within Corporate Security.

Skills

AI governance

Cross-functional collaboration

Security operations

Security program ownership

Tools

Netskope

Zscaler

GCP

Okta

Google Workspace

CrowdStrike Falcon

Job description

• Cockroach Labs is looking for a Senior Corporate Security Engineer to help protect our endpoints, cloud platforms, internal applications, and enterprise SaaS environment
• This is a hands-on, cross-functional role with a particular focus on AI governance, data protection, and corporate security operations. You’ll help shape how Cockroach Labs securely adopts AI tools and agents, strengthen our DLP and SaaS security controls, and lead security initiatives from design through implementation
• We’re looking for a well-rounded security engineer who can balance strong security practices with the needs of the business. You should be comfortable working across IT and security systems, partnering with teams throughout the company, and navigating emerging risks in a rapidly changing AI landscape. This role offers the opportunity to take meaningful ownership of our corporate security program while working on a wide range of high-impact projects
• Help build and manage our AI governance program, including security controls for AI tools, agents, MCP connections, and data flows
• Develop and secure internal applications hosted on GCP, including our internal LLM gateway
• Design and maintain DLP, data classification, and governance controls that protect sensitive data while enabling the business
• Administer and optimize CASB and SaaS security controls across cloud applications
• Assess security risks for internal applications, AI use cases, and third-party tools
• Monitor and respond to security alerts and incidents across email, endpoints, SaaS applications, and cloud environments
• Identify and reduce risks related to Shadow IT, Shadow AI, and SaaS sprawl
• Build automations that improve security visibility, response, and operational efficiency
• Partner with IT, Legal, Compliance, and Security teams on access management, endpoint security, regulatory requirements, and third-party risk
• Lead corporate security projects from design through implementation
• In your first 30 days, you will become an integrated member of our Corporate Engineering Team. You’ll become familiar with our existing systems and processes. We believe that it’s essential for you to take this first month to become familiar with our technology, processes and our company
• In your second month, you will collaborate with the team in order to evaluate the current state of our AI governance program and propose a course for improvements, scoping out projects to bolster our security posture. You will work to improve the AI governance program, tracking goals and milestones along the way
• In your third month, you will begin to take the reins of various projects within the scope of the Corporate Security team, leading initiatives from design to implementation. You will be a key player within the company, managing the AI governance program, helping to build out our AI Gateway and other infrastructure. You will help other teams manage their AI workloads, build AI applications, and support the secure hosting of internal tools

Benefits

• Competitive Health Insurance Coverage
• Paid Parental Leave
• Flexible PTO
• Learning & Development
• Relocation Support
• Employee Referral Bonus

Experience owning a security program, major initiative, or complex cross-functional project5+ years of experience in corporate security, security operations, IT security, or a related fieldExperience securing cloud-hosted applications and corporate IT environmentsStrong project management, communication, and cross-functional collaboration skillsFamiliarity with the security and data risks associated with AI tools, applications, agents, and integrationsHands-on experience with DLP, CASB, or SaaS security tools, including creating and tuning policiesExperience conducting risk assessments, gap assessments, or threat modelingA strong understanding of identity and access management, endpoints, email, file-sharing systems, networks, and enterprise SaaS applicationsExperience with Netskope, Zscaler, GCP, Okta, Google Workspace, CrowdStrike Falcon, or similar technologiesExperience building AI governance controls or securing AI applications and agentsPrevious experience in IT support or systems administrationExperience with SIEM, SOAR, and security automation tools such as Tines or PythonFamiliarity with frameworks such as NIST, SOC 2, ISO 27001, GDPR, or CIS Critical ControlsExperience using AI development tools such as Claude Code or CursorRelevant security certifications, such as Security+, CISSP, or CCSP