Senior Enterprise Security Engineer

Colossus Technologies Group; New York (NY); On-site; USD 140,000 - 200,000; Full time

Job summary

Colossus Technologies Group is seeking a hands-on Senior Security Engineer – Enterprise Security to fortify the corporate environment, endpoints, SaaS apps, and internal infrastructure. You will design, implement, and automate security controls across IAM, DLP, SIEM, and incident response, while mentoring engineers and guiding security architecture in a fast-growing cloud-first SaaS setting.

This role involves on-call duties and close collaboration with IT, security, and product teams to reduce

Qualifications

• 5+ years of Security Engineering experience.
• Experience in enterprise security engineering for corporate environments.
• Experience securing SaaS applications.
• Experience with CrowdStrike EDR or similar endpoint security.
• Experience with IAM and SSO.
• Security architecture and vulnerability management.
• Security automation and incident response.
• DLP program experience across endpoints, networks, SaaS, or cloud.
• Strong malware and incident investigation skills.

Responsibilities

• Design and implement enterprise security solutions across users, endpoints, applications, and infrastructure.
• Investigate malware, threats, and security incidents.
• Develop and tune SIEM detections, alerts, and automation.
• Secure corporate SaaS apps and perform end-to-end security reviews.
• Evaluate data flows, authentication, authorization, and security controls.
• Support incident response and forensic investigations.
• Drive remediation of vulnerabilities and harden configurations.
• Mentor junior engineers and participate in on-call rotations.

Job description

We’re partnering with a rapidly growing, cloud-first SaaS organization looking for a Senior Security Engineer – Enterprise Security to help secure its corporate environment, employees, endpoints, SaaS applications, and internal infrastructure.

This is a hands-on security engineering role for someone who understands how to secure a modern enterprise environment — from endpoints and identity to SaaS applications, DLP, SIEM, networking, and incident response.

This is not a traditional SOC analyst position. We’re looking for an engineer who can design, implement, automate, and improve security controls, while also jumping into investigations and incidents when needed.

What You’ll Own

You’ll work across Enterprise Security, IT, Infrastructure, and Engineering to strengthen security across a growing technology environment.

Key responsibilities include:

• Design and implement enterprise security solutions protecting users, endpoints, applications, and infrastructure
• Investigate malware, advanced threats, suspicious activity, and security incidents
• Build and improve SIEM detections, alerts, reporting, and security automation
• Secure corporate SaaS applications and conduct end-to-end security reviews
• Evaluate application architecture, data flows, authentication, authorization, and security controls
• Help drive Data Loss Prevention (DLP) strategy and implementation
• Secure email, Mac endpoints, enterprise networks, and internal systems
• Strengthen IAM, SSO, MDM, and password-management controls
• Perform forensic investigations and support incident response
• Identify vulnerabilities and drive remediation through completion
• Harden internal configurations and recommend improvements to security architecture
• Evaluate new technologies and third-party platforms for security risk
• Develop automation that improves detection, reporting, and security operations
• Partner with technical and business teams to implement security policies and controls
• Participate in an on-call rotation for critical security incidents
• Mentor junior engineers and act as a senior technical resource

What We’re Looking For

The ideal candidate is a well-rounded Enterprise Security Engineer who has been hands-on inside a modern corporate security environment.

Must-have experience:

• 5+ years of Security Engineering experience
• Enterprise / corporate security engineering
• Securing SaaS applications
• CrowdStrike EDR or similar endpoint security platforms
• Mac endpoint security
• IAM and SSO
• SIEM and detection engineering
• Incident response and security investigations
• Vulnerability management
• Security architecture and technical security reviews
• Security automation

Experience designing or operating DLP programs across endpoints, networks, SaaS, and cloud environments is especially valuable.

Bonus Experience

• AI security
• Advanced technical security certifications
• Security scripting and automation
• Experience working in a fast-growing SaaS environment