Senior Security Engineer (Remote, EU/CET)

mazedesign; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote position

International health/vision/dental

Life and disability insurance

Mental health support (unlimited tele-

Flexible PTO

Meaningful equity

Company retreats

16 weeks family leave

Benefits allowance

Remote work setup fund

Company laptop

Flexible schedule

Virtual social engagements

Job summary

mazedesign is seeking a Senior Security Engineer to own the intersection of corporate IT and security engineering. The role emphasizes automating identity, device management, and access provisioning so engineers can focus on cloud, code, and SaaS security.

Reporting to platform engineering leadership, you will collaborate across teams to strengthen security posture in a remote-first environment with global coverage.

Qualifications

• 5+ years of software, infrastructure, or security engineering.
• Experience owning identity, MDM, and joiner/leaver automation in remote environments.
• Practical experience securing modern AWS or GCP environments and articulating tradeoffs.
• Experience running vulnerability management with clear ownership and SLAs.
• Ability to work across IT and security boundaries in an engineering-first role.

Responsibilities

• Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA, and access policies.
• Run the macOS fleet through an MDM platform, handling enrolment, configuration, patching, and compliance.
• Automate joiner, mover, and leaver flows integrated with HRIS so new hires are provisioned on day one.
• Manage SaaS licensing and app provisioning with a focus on lightweight, automated, self-service support.
• Own security controls across AWS, GitHub, Kubernetes, and the SaaS environment, including IAM hygiene and guardrails.
• Run vulnerability management end-to-end from findings to remediation with clear owners and SLAs.
• Run access reviews and generate audit evidence through a compliance automation platform.
• Apply AI-assisted workflows to reduce manual work and accelerate investigations.

Skills

Security engineering

Identity management

Automation

IaC (infrastructure as code)

Cloud security engineering

Tools

AWS

GCP

Google Workspace

MDM

Kubernetes

IAM

Job description

Role overview

Senior Security Engineer owning the intersection of corporate IT and security engineering at a remote user research platform company. The role focuses on automating identity, device management, and access provisioning so that most of the engineer's time goes toward cloud, code, and SaaS security engineering rather than helpdesk work. The position reports into platform engineering leadership and partners closely with teams across the organization.

Responsibilities

• Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA, and access policies


• Run the macOS fleet through an MDM platform, handling enrolment, configuration, patching, and compliance


• Automate joiner, mover, and leaver flows integrated with the HRIS so new hires are fully provisioned on day one and leavers lose access within hours


• Manage SaaS licensing and app provisioning with a focus on lightweight, automated, and self-service support


• Own security controls across AWS, GitHub, Kubernetes, and the SaaS environment, including role-based access, IAM hygiene, cloud guardrails, network boundaries, and secrets management


• Run vulnerability management end-to-end, taking findings from scanning tools and pentests through remediation and verification with clear owners and SLAs


• Run access reviews and generate audit evidence through a compliance automation platform


• Apply AI-assisted and agentic workflows to reduce manual work and accelerate investigation

Requirements

• Strong software, infrastructure, or security engineering background, comfortable using code and infrastructure-as-code to automate repetitive work


• Hands-on experience owning identity, MDM, and joiner/leaver automation at a remote company


• Practical experience securing a modern AWS or GCP environment and articulating tradeoffs


• Background running vulnerability management with clear ownership and SLAs


• Comfort working across IT and security boundaries in an engineering-first role

Nice to have

• Experience applying AI-assisted or agentic workflows to security operations


• Familiarity with compliance automation platforms for producing audit evidence

Benefits and work setup

• Remote position with preference for candidates in the Netherlands, United Kingdom, Ireland, Spain, or Portugal


• Health, vision, and dental insurance with international coverage, plus life and disability insurance, with team member premiums covered


• Mental health support including unlimited virtual therapy sessions and 24/7 access to resources


• Flexible paid time off, meaningful equity, and fully paid company retreats


• 16 weeks of paid family leave for birth or adoptive parents


• Monthly flexible benefits allowance usable for dependent health coverage or personal benefits such as gym memberships or co-working


• $1,500 remote work setup fund plus a company-provided laptop


• Flexible work schedule with self-managed hours and regular virtual social engagements