Senior Security Engineer

Navan; United States; On-site; USD 140,000 - 200,000; Full time

Job summary

Navan is seeking a Senior Enterprise Security Engineer to architect and advance our security posture across a cloud-native environment. This hands-on role safeguards our infrastructure, data, and global user base while driving vulnerability management, detection tuning, and incident response.

You will partner with Engineering, IT, and Compliance to embed security early in projects, enforce least privilege, and push for measurable improvements through KPIs.

Qualifications

• 5+ years of hands-on information or enterprise security experience.
• Experience designing or maturing an enterprise vulnerability management program.
• Incident response experience with on-call rotation.
• Knowledge of attacker TTPs, CVSS, EPSS, KEV, and risk prioritization.
• Ability to translate vulnerabilities into business context for stakeholders.
• Ability to review SIEM/EDR/XDR outputs and tune rules.

Responsibilities

• Architect, manage, and scale the end-to-end vulnerability management program.
• Participate in on-call rotation and lead post-incident reviews.
• Tune SIEM/EDR/XDR and optimize detection to reduce noise.
• Define and enforce Zero Trust and identity governance across the enterprise.
• Strengthen email security and automate responses to threats.
• Collaborate with Engineering, IT, and Compliance to embed security early in the lifecycle.
• Establish KPIs for vulnerability management and incident response; drive continuous improvement.

Skills

Vulnerability management

Incident response

Detection optimization

Zero Trust

Identity governance

Access management

Email security

SOAR workflows

On-call rotation

CIEM/TFM security

Tools

Tenable

Qualys

Rapid7

Wiz

Phantom

Demisto

XSOAR

Okta

Ping

Azure AD

Material Security

Job description

As a Senior Enterprise Security Engineer, you will be a foundational architect of Navan’s security posture, directly safeguarding our corporate infrastructure, sensitive financial data, and global user base. This is a highly hands-on, configuration-driven role that requires working directly with systems that power our security program in a modern, cloud-native environment.

Your work will be critical in ensuring Navan becomes globally recognized for secure, unparalleled corporate travel and expense management.

What You’ll Do:

• Vulnerability Management & Exposure Reduction: Architect, manage, and scale the end-to-end vulnerability management program. Oversee continuous asset discovery, vulnerability scanning, threat exposure assessment, and risk-based prioritization (CVSS, EPSS, threat intelligence). Partner closely with infrastructure, engineering, and IT teams to establish SLAs, streamline patch management workflows, and validate effective remediation.
• Security Incident Response & On-Call Rotation: Participate in the security engineering on-call rotation. Serve as a responder responsible for identifying, scoping, triaging, managing, and mitigating security incidents, followed by leading thorough post-incident reviews and root-cause analyses.
• Detection & Automation Optimization: Help improve and maintain our existing detection pipeline by providing feedback on alert quality, reviewing current monitoring coverage, and performing direct tuning in SIEM platforms to reduce noise and increase signal fidelity. Evaluate existing SOAR playbooks and workflows, offering recommendations and performing targeted updates to streamline response processes.
• Identity Governance & Access Control: Define and enforce strong IAM principles (e.g., Least Privilege, Zero Trust) and contribute to identity governance platforms to ensure secure authentication, authorization, and access across the enterprise.
• Email Security: Strengthen email security by managing alerts and workflows in platforms like Material Security, reviewing post-delivery threats, and improving automated response to suspicious messages and mailbox activity.
• Cross-Functional Security Leadership: Proactively partner with Engineering, IT, and Compliance teams to embed security best practices early in the lifecycle, align vulnerability SLAs with business risk objectives, and foster a culture of shared security ownership.
• Process Improvement & Metrics: Establish and track key performance indicators (KPIs) for vulnerability management and incident response. Participate actively in incident and posture reviews, drive continuous operational improvements, and work with external vendors to align system capabilities and security expectations.

What We’re Looking For:

• 5+ years of hands-on experience in information or enterprise security, preferably within a high-growth tech environment utilizing cloud infrastructure.
• Proven track record of designing, implementing, or maturing an enterprise-wide Vulnerability Management program, including expertise with modern exposure management and scanning platforms (e.g., Tenable, Qualys, Rapid7, Wiz) and vulnerability remediation workflows.
• Demonstrated experience in incident response, with a willingness to participate in an on-call rotation to identify, analyze, contain, and resolve active security incidents.
• Deep, up-to-date knowledge of modern attacker tactics, techniques, and procedures (TTPs), common exploit vectors, and risk prioritization frameworks (CVSS, EPSS, KEV). You excel at translating technical vulnerabilities and risks into clear business context for a range of stakeholders.
• Ability to review SIEM and EDR/XDR platform outputs, provide constructive feedback on detection efficacy, and execute direct rule tuning and configuration refinements to optimize signal-to-noise ratio.
• Comfort interfacing with SOAR workflows (e.g., Phantom, Demisto, XSOAR) to suggest optimizations and perform light playbook updates that improve overall team efficiency.
• Demonstrated expertise in Zero Trust principles, modern identity governance, and access management solutions (e.g., Okta, Ping, or Azure AD).
• Experience managing email security using platforms like Material Security, including reviewing post-delivery detections and analyzing mailbox activity.
• Highly collaborative with strong ownership skills, adept at negotiating SLA timelines with engineering/IT partners and contributing actively within a small, focused security team.

Navan uses AI-assisted Automated Employment Decision Tool (Metaview) to assist with evaluating resumes against job qualifications for this role. All final decisions are made by human recruiters and hiring managers.

Human oversight: Metaview does not automatically reject candidates or make final hiring decisions. Our recruiters and hiring managers review all outputs and make the final hiring decision regarding every application.

• Your rights: If you prefer to have your application reviewed without AI assistance, you may request a human evaluation by entering your email here. Your decision to do so will not affect how your candidacy is evaluated.

Please refer to our Candidate Privacy Notice for more information about our processing of personal data, and your rights.