Senior IT Security Engineer - Identity & SaaS (Remote)

VulnU; San Francisco, New York, Chicago (CA, NY, IL); Hybrid; USD 150,000 - 215,000; Full time

Benefits offered by this job

Flexible PTO

Retirement match

Equity

Job summary

Komodo Health is seeking a Senior Corporate IT Security Engineer to lead hands-on security across identity, devices, endpoints, and workforce SaaS tools. You will own corporate security programs, drive phishing-resistant MFA, and enforce least-privilege access.

This senior IC role collaborates with Legal, Compliance, and business leaders to manage incidents and risk. You will work in a hybrid environment with a focus on governance, incident response, and AI safety controls, delivering measurable

Qualifications

• 6–8+ years in corporate security, IT security, security engineering or security operations, including 4+ years hands-on engineering of corporate controls.
• Hands-on experience with enterprise identity provider protocols and lifecycle automation.
• Experience with device trust, MDM and EDR across Windows and macOS.
• Experience hardening productivity suites and major SaaS platforms.
• Incident Commander or lead responder on security incidents with post-incident reviews.

Responsibilities

• Identity and access hardening in enterprise identity provider and productivity suite.
• Device trust and conditional access using MDM/EDR.
• Joiner-mover-leaver integrity across apps and deprovisioning.
• Workforce SaaS security posture, API permissions and audit logging.
• Corporate incident response leadership and post-incident reviews.
• AI guardrails: tool standards, RBAC, logging and retention.

Skills

Identity provider expertise

SAML/OIDC/OAuth 2.0

Device health/zero trust

MDM/EDR integration

OAuth app governance

Incident response leadership

Python scripting

SOC 2/audit evidence

Executive communication

Tools

SAML

OIDC

OAuth 2.0

SCIM

Job description

Komodo Health is seeking a Senior Corporate IT Security Engineer to lead hands-on security across identity, devices, endpoints, and workforce SaaS tools. You will own corporate security programs, drive phishing-resistant MFA, and enforce least-privilege access.

This senior IC role collaborates with Legal, Compliance, and business leaders to manage incidents and risk. You will work in a hybrid environment with a focus on governance, incident response, and AI safety controls, delivering measurable