Senior Corporate Security Engineer: Zero-Trust & Automation

Onebrief; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Onebrief is actively hiring a Corporate Systems Security Engineer to own and mature security across endpoints, identity, SaaS applications, browsers, Zero Trust infrastructure, and the broader corporate security stack in a distributed, remote-work environment.

The role focuses on reducing manual security operations by building systems that enforce security requirements and provide trustworthy audit evidence, while collaborating with Corporate IT, Security Operations, and GRC to implement

Qualifications

• 4+ years of hands-on experience in security engineering, enterprise security, systems security, or related technical role.
• Experience securing identity, SaaS, or Zero Trust environments and understanding how config decisions affect security.
• Experience building security automation using APIs, workflow automation platforms, infrastructure-as-code, scripting, or config-management tech.
• Experience deploying, administering, or owning endpoint security and detection technologies such as EDR and SIEM.
• Experience administering MDM or endpoint-management platforms to enforce security configurations.

Responsibilities

• Own and mature the security systems protecting Onebrief’s corporate environment.
• Establish and enforce secure configuration baselines across corporate systems.
• Build API-driven, IaC, or workflow-based automation to connect security systems and automate evidence collection.
• Collaborate with Corporate IT and application owners to securely deploy endpoints, apps, and SaaS platforms.
• Improve security telemetry by integrating systems with centralized monitoring.
• Translate security and compliance requirements (CMMC 2.0, NIST) into practical implementations.

Skills

EDR/SIEM

Zero Trust

API automation

MDM / Endpoint

Endpoint security

Job description

Onebrief is actively hiring a Corporate Systems Security Engineer to own and mature security across endpoints, identity, SaaS applications, browsers, Zero Trust infrastructure, and the broader corporate security stack in a distributed, remote-work environment.

The role focuses on reducing manual security operations by building systems that enforce security requirements and provide trustworthy audit evidence, while collaborating with Corporate IT, Security Operations, and GRC to implement