Senior Security Engineer - Identity & Endpoint

Relativity ODA LLC; Illinois; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Relativity ODA LLC is seeking a Senior Security Engineer to advance enterprise security through hands-on design, deployment, and optimization of AI-enabled security technologies. You will drive automated orchestration of security operations, threat detection, and rapid response across identity and endpoint security domains, collaborating with cross-functional engineering teams.

The role emphasizes leadership in defense-in-depth, telemetry integration, and remediation workflows, with a focus on

Qualifications

• Experience deploying and optimizing EDR/XDR platforms and custom detections.
• Design and enforcement of endpoint hardening baselines and image controls.
• Hands-on expertise with identity security controls across workforce and privileged identities.
• Ability to integrate telemetry into central analytics and SIEM for cross-domain correlation.

Responsibilities

• Deploy, integrate and optimize EDR/XDR platforms and automated responses.
• Lead design and deployment of identity security controls across identities and access.
• Integrate identity and endpoint telemetry into analytics/SIEM for detection and response.
• Serve as escalation point for endpoint- and identity-based security events and remediation.

Skills

EDR/XDR platforms

Endpoint security

Identity security

SIEM integration

Threat detection

Forensics analysis

Automation & orchestration

Policy as code

Tools

SIEM platforms

EDR/XDR tools

Identity governance tools

Job description

Posting Type

Hybrid/Remote

Job Overview

The Senior Security Engineer is a technically deep, hands-on practitioner who elevates the enterprise security function through technical project leadership, cross-functional collaboration, and mentorship. Operating within a layered defense-in-depth program, this engineer takes ownership of complex security technology initiatives spanning design, deployment, and optimization of AI-enabled security technologies at all layers. With a focus on advancing automated orchestration of security operations, detection and response capabilities, and hardening rigor, this role serves as a technical escalation point and force multiplier for the security engineering team. The Senior Security Engineer works closely with the Senior Manager of Enterprise Security, and cross-functional engineering teams to reduce the organization's attack surface, enable threat landscape adaptability, and improve detection and response times across Relativity's technical ecosystem.

This role will have a primary focus on identity and endpoint security engineering, including the design, deployment, and optimization of controls that protect user and privileged identities, devices, and access across the enterprise. The engineer will strengthen identity governance, authentication, authorization, privileged access, endpoint hardening, device trust, threat detection, and response by integrating identity and endpoint security technologies, automation, policy-based controls, and telemetry into the broader defense-in-depth and security operations ecosystem.

Job Description and Requirements

Endpoint Security & Hardening

• Deploy, integrate, optimize and manage EDR/XDR platforms; define custom detections and automated response actions across security tooling.
• Own the implementation and enforcement of endpoint and image hardening baselines, configuration standards, and application control baselines.
• Integrate endpoint telemetry into the central analytics platform or (SIEM) to support security context and cross-domain correlation; ensure SIEM coverage is adequate and effective.
• Serve as a technical escalation point for endpoint-based security events, exposures, vulnerabilities, and alerts; collaborate cross-functionally to drive remediation within appropriate SLAs.
• Investigate complex endpoint-based alerts and incidents through to root cause: perform triage, forensic artifact collection (memory, disk, logs), timeline reconstruction, and containment/eradication actions.

Identity Security & Access

• Lead the design, deployment, integration, and optimization of identity security controls across workforce, privileged, service, and machine identities.
• Engineer and maintain capabilities for identity governance and administration, single sign-on, multi-factor authentication, conditional access, privileged access management, just-in-time access, secrets management, and identity threat detection and response.
• Design and enforce least-privilege access patterns, role-based and attribute-based access controls, segregation of duties, and lifecycle controls for joiner, mover, and leaver events.
• Integrate identity, authentication, authorization, and privileged-access telemetry into central analytics and SIEM platforms to enable cross-domain correlation, detection, investigation, and automated response.
• Serve as a technical escalation point for identity-based attacks, anomalous access, credential compromise, privilege misuse, and authorization failures; lead root-cause analysis and coordinated remediation.
• Automate identity and access provisioning, certification, policy enforcement, control validation, and response through APIs, scripting, workflow orchestration, and policy-as-code practices.
• Partner with IAM, IT, Security, Engineering, and application owners to embed secure identity patterns, remediate access risks, and improve the adoption and usability of identity controls.
• Define and monitor identity-security measures such as authentication coverage, privileged-access reduction, access-review completion, policy compliance, identity-control health, detection efficacy, and remediation performance.

Layered Defense/Defense in Depth

• Lead the design, deployment and optimization security controls spanning perimeter, network, host, application, identity and data layers, ensuring and maintaining effectiveness of controls at each layer.
• Contribute to and enforce security control standards and design patterns aligned to industry-recognized frameworks, serving as a subject matter expert during implementation and review.
• Validate that telemetry from each layer feeds the central analytics platforms and supports 360-degree visibility and appropriate attack surface coverage.
• Continuously assess effectiveness of enterprise security controls as the ecosystem expands and the threat landscape evolves; propose and implement supplemental or extended coverage.
• Proactively partner with IT, Engineering and other stakeholders to embed security controls na