Senior Security Engineer: Endpoint & Email Security (Hybrid)

OpenLoop; Des Moines (IA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental & Vision

FSA/HSA

Generous PTO

401(k) match

Life Insurance & Pet Insurance

Job summary

OpenLoop actively seeks a Staff Security Engineer to own and mature security across endpoints and email, protecting PHI data and aligning with HITRUST and SOC 2 requirements. You’ll write standards, mentor engineers, and partner across IT, Engineering, Compliance, and SecOps.

You’ll operate in a regulated environment, shaping security controls that scale with the company and its subsidiaries, while delivering measurable risk reductions.

Qualifications

• 8+ years in security engineering delivering end-to-end outcomes.
• Hands-on expertise in endpoint and email security.
• Experience deploying MDM/MAM platforms (Kandji, Jamf, Intune).
• Experience deploying enterprise browser platform.
• Knowledge of CIS Benchmarks and fleet-wide compliance.
• Exposure to working in regulated environments (HIPAA/HITRUST/SOC 2) and producing audit evidence.
• Clear written communication for non-security executives.

Responsibilities

• Own engineering of security controls for macOS and Windows fleets.
• Deploy and manage MDM/MAM policies protecting PHI data.
• Deploy and manage an enterprise browser platform with data controls.
• Develop CIS Benchmark baselines and evidence for HITRUST and SOC 2.
• Mentor engineers and serve as escalation during incidents.
• Collaborate with IT, Engineering, Compliance and SecOps.
• Write standards, baselines and runbooks for others to follow.
• Automate repetitive work and improve processes.

Job description

OpenLoop actively seeks a Staff Security Engineer to own and mature security across endpoints and email, protecting PHI data and aligning with HITRUST and SOC 2 requirements. You’ll write standards, mentor engineers, and partner across IT, Engineering, Compliance, and SecOps.

You’ll operate in a regulated environment, shaping security controls that scale with the company and its subsidiaries, while delivering measurable risk reductions.