Senior Security Engineer, Corporate Security

Turnkey; New York (NY); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Life insurance

Disability insurance

401(k) plan

Learning budget

Unlimited PTO

MacBook Pro

Lunch stipend

Job summary

Turnkey in New York, NY, seeks a Senior Corporate Security Engineer to own security of corporate infrastructure. You’ll be the first dedicated corporate security hire, partnering with the security lead to build enterprise capabilities from the ground up.

You’ll protect Turnkey’s people, endpoints, SaaS, identity systems, and internal infrastructure, enabling rapid work without compromising safety. Design controls that are robust and user-friendly as the company scales.

Qualifications

• 5+ years of corporate/enterprise security experience.
• Hands-on with MDM, EDR/XDR, IAM, and zero-trust architectures.
• Experience securing cloud environments (AWS, GCP) and macOS fleets.
• Security governance, risk assessment, and incident response knowledge.

Responsibilities

• Build, secure, and scale corporate infrastructure and endpoints.
• Lead risk reduction, policy development, and security design reviews.
• Design automated detection, response, and runbooks for ops teams.
• Foster security awareness and secure-by-default practices across the org.

Skills

MDM Platforms

EDR/XDR

IAM

Auth Protocols

Zero-Trust

Cloud Security

macOS Security

Tools

JAMF

Kandji

Intune

CrowdStrike

SentinelOne

Microsoft Defender

Job description

About Us

Turnkey builds secure, developer-first infrastructure for private key management, making it simple to create wallets, sign transactions, and automate on-chain actions through one elegant API – without ever exposing sensitive key material.

Our mission is to secure the open internet by making strong cryptography and key management the default. Turnkey was founded by the team behind Coinbase Custody – the world’s largest and most secure crypto custodian – whose work has helped protect over $100B in crypto across the industry.

Turnkey's team is low-ego, high-agency, and high-autonomy with more than 100 years of combined experience in cryptography, security, and low-level systems, building reliable infrastructure used at scale.

Role Overview

We are hiring a Senior Corporate Security Engineer to own and scale the security of Turnkey's corporate infrastructure. This is a foundational role - you'll be the first dedicated corporate security hire, working diectly with the security lead to build enterprise security capabilities from the ground up.

In this role, you’ll protect Turnkey’s people, endpoints, SaaS, identity systems, and internal
infrastructure, securing our distributed workforce while enabling the team to move quickly without compromising safety. Sitting at the intersection of security engineering, IT operations, and risk management, you’ll design and build security controls that are both robust and user-friendly, ensuring the company remains secure as it scales

What You’ll Do

• Build & Secure Corporate Infrastructure

  • Design, implement, and manage security for endpoints and distributed systems; deploy and operate our security stack (MDM, EDR/XDR, ZTNA, SSO); enforce zero-trust principles, least-privilege access, and hardening standards

• Drive Security Initiatives & Risk Reduction

  • Lead initiatives around endpoint hardening, access controls, and vendor risk; conduct security design reviews, risk assessments, and vulnerability remediation; develop and enforce security policies and best practices.

• Detection, Response & Automation

  • Respond to security incidents with urgency and technical depth; collaborate on detection rules, alerts, and monitoring; automate workflows and create runbooks and playbooks to scale security operations efficiently.

• Foster Security Culture & Education

  • Evangelize security best practices, build awareness programs, and partner with teams to embed “secure by default” principles into workflows; serve as a trusted security advisor across the organization.

What We're Looking For

• 5+ years of experience in corporate and/or enterprise security, IT security, or endpoint security engineering

• Hands-on experience with:

  • MDM Platforms (JAMF, Kandji, Intune, or similar)

  • EDR/XDR solutions (Cloudstrike, SentinelOne, Microsoft Defender, etc.)

  • Identity and Access Management (Okta, Azure AD/Entra ID, etc.)

  • Authentication Protocols (SAML, OAuth, OIDC, SCIM, etc.)

  • Zero-trust principles (device trust, conditional access, least-privilege models)

• Cloud security experience (AWS, GCP)

• macOS security expertise (architecture, hardening, and fleet management)

• Security-first mindset with practical knowledge of defense-in-depth and risk-based security

Style Points

• Crypto/web3 or FinTech experience

• Detection/response experience: SIEM, log analysis, threat hunting, or SOC operations

• Knowledge of modern threat landscape: Adversary TTPs, phishing, insider threats, etc.

• Security compliance experience: SOC 2, ISO 27001, or similar frameworks

What We Offer

• Full benefits, including medical, dental, vision, life, disability, HSA/FSA, 401(k) - detailed benefits overview available as we get further in the process

• Paid parental leave

• Unlimited PTO (and we will force you to take time off!)

• $3,000/yr learning and development budget to attend industry conferences

• Multiple team offsites per year

• Macbook Pro laptop

• Lunch stipend (for those physically in the New York City office)