Senior Enterprise IT Security Engineer

Komodo Health, Inc.; United States; Hybrid; USD 150,000 - 215,000; Full time

Job summary

Komodo Health, Inc. is seeking a senior IT security professional to engineer and run corporate security across identity, devices, endpoints, networks, and workforce SaaS. You will be hands-on 70% of the time and act as security partner for Legal, Compliance and business leaders.

As a senior IC, you will lead incident response, implement phishing-resistant MFA, RBAC, and SIEM/audit logging, with cross-functional collaboration across IT, Engineering, Security, and People teams.

Qualifications

• 6–8+ years in corporate security, IT security, security engineering or security operations.
• Hands-on engineering of corporate controls at a cloud-native or SaaS company.
• Production-quality scripting in Python or similar, and experience integrating security tools through APIs.
• Experience producing control evidence for SOC 2 and other audits.
• Clear writing and executive communication, translating risk into business decisions.

Responsibilities

• Identity and access hardening in the enterprise identity provider and productivity suite.
• Device trust and conditional access across macOS and Windows fleets.
• Joiner‑mover‑leaver integrity with timely deprovisioning and access reviews.
• Workforce SaaS security posture including API controls and audit logging.
• Corporate incident response as incident commander for corporate incidents.
• AI guardrails: approved‑tool standards and RBAC for AI tools and integrations.

Skills

Corporate IT security

Incident response leadership

Security operations

Executive communication

SOC 2 audits

Tools

Python scripting

APIs integration

Job description

Komodo Health, Inc. is seeking a senior IT security professional to engineer and run corporate security across identity, devices, endpoints, networks, and workforce SaaS. You will be hands-on 70% of the time and act as security partner for Legal, Compliance and business leaders.

As a senior IC, you will lead incident response, implement phishing-resistant MFA, RBAC, and SIEM/audit logging, with cross-functional collaboration across IT, Engineering, Security, and People teams.