Senior Corporate Security Engineer: IAM, Endpoints & Audits

DFNS; New York (NY); Remote; USD 150,000 - 250,000; Full time

Benefits offered by this job

MacBook

Home technology allowance

Stock options vesting over four years

Remote first

Healthcare

Travel expenses covered

Job summary

DFNS is seeking a Staff Corporate Security Engineer to own and run security for a multi-region platform. You will lead identity and access, endpoint protections, and detection/response across Europe, the US, and Asia, ensuring SOC 1/2 and ISO controls stay audit-ready.

You’ll automate controls with scripting, manage SIEM or equivalent, and drive secure configurations across MDM, EDR, and Google Workspace, while supporting audits and improving phishing resilience.

Qualifications

• Experience owning corporate security at a technology company, hands on, as the person who built and ran the controls.
• Deep identity and access expertise across SSO and identity providers, MFA and passkeys, device trust and automated access lifecycle.
• Endpoint and SaaS security in practice, including MDM, EDR and Google Workspace administration and investigation.
• Experience building detection and running incident response for corporate systems, including a SIEM or equivalent.
• Scripting and automation (Python, Bash, APIs) to automate controls and the evidence they produce.
• Experience operating controls under SOC 2 or ISO 27001 and supporting audits.
• Writing clear enough that an auditor and an engineer read the same document and both understand it.
• Nice-to-haves: Cloud security fundamentals on AWS.
• Nice-to-haves: Experience in fintech or another regulated, audited environment.
• Nice-to-haves: Experience running a macOS fleet at scale.
• Nice-to-haves: Business continuity and disaster recovery planning.

Responsibilities

• Own identity and access across the company (SSO, MFA, passkeys, device trust, automated joiner, mover and leaver flows).
• Harden and manage endpoints and the SaaS estate, from MDM and EDR to Google Workspace and the tools we run the company on.
• Build detection and response for corporate systems, from centralized logging and alerting to runbooks, and lead the response when something happens.
• Run asset inventory and vulnerability management for corporate infrastructure, with automation in place of spreadsheets.
• Keep the SOC 1, SOC 2, ISO 22301, and ISO 27001, 27017 and 27018 controls you own operating and audit ready, and carry them through surveillance audits.
• Design security awareness and phishing resilience that makes staff the first line of defense rather than the weakest link.
• Work with Infrastructure and Product Security so the boundary between corporate and production is explicit, enforced and tested.

Skills

Identity & access

SSO & MFA

Device trust

Automation

Incident response

SIEM

Audits

Security awareness

Tools

MDM

EDR

Google Workspace

Job description

DFNS is seeking a Staff Corporate Security Engineer to own and run security for a multi-region platform. You will lead identity and access, endpoint protections, and detection/response across Europe, the US, and Asia, ensuring SOC 1/2 and ISO controls stay audit-ready.

You’ll automate controls with scripting, manage SIEM or equivalent, and drive secure configurations across MDM, EDR, and Google Workspace, while supporting audits and improving phishing resilience.