Senior Corporate Security Engineer: LLM-Driven Defense

OpenKrill; United States; Remote; USD 220,000 - 240,000; Full time

Job summary

Material Security is a remote-first security company seeking a senior security engineer to own detection and response across corporate telemetry, identity, and SaaS. You will design LLM-driven triage, harden endpoint defenses for Mac devices, and collaborate with engineering to ship detection updates across our platform.

You will lead the integration of secure practices with Google Workspace governance, OAuth, and Apps Script controls, while building scalable playbooks and processes for incident

Qualifications

• Operator Depth: 6+ years in corporate or enterprise security with hands-on SIEM ownership.
• Software Engineering: Python, Go, or TypeScript; automate enforcement via vendor APIs.
• Identity Fundamentals: Deep understanding of OAuth, SAML/OIDC, token lifecycle in cloud IAM.
• Endpoint Fluency: Managed a Mac fleet with modern MDM and EDR; moved from deployed to enforced.
• Applied LLM Judgment: Built or experimented with LLM-driven workflows and evaluation.
• Software Development: Contributed detection logic or security features to a product codebase.
• How You Work: Collaborative, curious, direct; you engineer problems away rather than staff them.

Responsibilities

• Detection and Response (own): Own corporate telemetry and detection content; close gaps, reduce noise, and own incident playbooks.
• LLM-Driven Triage (own): Design agent to review privileged access grants and high-fidelity alerts with measured limits.
• Endpoint (shared): Device management, EDR coverage, and BYOD posture enforcement for Mac fleet.
• Identity and SaaS (shared): Maintain phishing-resistant authentication, automate access-review evidence.
• Google Workspace (shared): Admin alerting, OAuth governance, Apps Script governance, DLP.
• Corporate to Production (shared): Detections crossing the corporate/production boundary and logging.

Skills

Operator Depth

Software Engineering

Identity Fundamentals

Endpoint Fluency

Applied LLM Judgment

Software Development

How You Work

Job description

Material Security is a remote-first security company seeking a senior security engineer to own detection and response across corporate telemetry, identity, and SaaS. You will design LLM-driven triage, harden endpoint defenses for Mac devices, and collaborate with engineering to ship detection updates across our platform.

You will lead the integration of secure practices with Google Workspace governance, OAuth, and Apps Script controls, while building scalable playbooks and processes for incident