Staff Corporate Security Engineer

Dfns; New York, San Francisco (NY, CA); Hybrid; USD 150,000 - 250,000; Full time

Benefits offered by this job

Health insurance

Stock options

Flexible vacation

Parental leave

Home technology allowance

MacBook provided

Job summary

DFNS is hiring a Staff Corporate Security Engineer to own corporate security across the US, Europe, and Asia in a remote-first setup with offices available. You will implement identity, access controls, and endpoint security while building robust detection, response, and audit readiness.

You will work with Infrastructure and Product Security to ensure secure boundaries, drive awareness, and maintain our compliance posture across SOC 1, SOC 2, and ISO 27001 frameworks.

Qualifications

• Hands-on corporate security experience building and running controls.
• Deep IAM expertise: SSO, MFA, passkeys, device trust, automated access lifecycle.
• Endpoint and SaaS security in practice: MDM, EDR, Google Workspace administration.
• Experience building detection and running incident response for corporate systems (SIEM or equivalent).
• Clear writing for auditors and engineers to read the same document.

Responsibilities

• Own identity and access across the company (SSO, MFA, passkeys, device trust, automated joiner/mover/leaver) to prove who has access to what.
• Harden and manage endpoints and the SaaS estate (MDM, EDR, Google Workspace).
• Build detection and response for corporate systems from logging to runbooks; lead the response.
• Run asset inventory and vulnerability management with automation.
• Maintain SOC 1/2, ISO 22301 and related controls and audits across the estate.
• Design security awareness and phishing resilience for staff as the first line of defense.
• Collaborate with Infrastructure and Product Security to keep corporate boundaries explicit.

Skills

Identity & access

Endpoint security

Incident response

Automation scripting

SOC 2 / ISO 27001

Job description

Staff Corporate Security EngineerJob detailsDepartments / SecurityNew York, San Francisco, ParisFull-timeRemote$150,000 USD - $250,000 USD## **Staff Corporate Security Engineer**US or Europe, remote first with offices available · Full-time · Security · Reports to CISO### About DFNSFinance is moving onchain. Stablecoins, tokenized deposits, securities and funds are changing how money and assets are issued, held and transferred. The destination is a financial system where any asset can be issued, moved and governed onchain with the controls regulated institutions require. That shift needs a new foundation. Just as core banking systems manage accounts and ledgers today, financial institutions need a platform to manage digital assets. DFNS is that platform. Today, we secure hundreds of billions of dollars in assets every month for more than 500 clients worldwide.### Why this roleOur platform secures a lot of value and has never been breached. Companies like ours rarely fail through the product. They fail through a laptop, an identity, a SaaS integration or a leaver whose access was never removed. You will own corporate security for a company spread across Europe, America, and Asia, with controls strong enough to pass a bank’s due diligence and light enough that engineers do not route around them. In year one you will make identity, endpoints and SaaS provably controlled, build detection for the corporate estate and carry the corporate control set through our SOC 1, SOC 2, ISO 27001, and ISO 22301 audits.### What you’ll do* Own identity and access across the company (SSO, MFA, passkeys, device trust, automated joiner, mover and leaver flows) so that who has access to what is provable at any moment.* Harden and manage endpoints and the SaaS estate, from MDM and EDR to Google Workspace and the tools we run the company on.* Build detection and response for corporate systems, from centralized logging and alerting to runbooks, and lead the response when something happens.* Run asset inventory and vulnerability management for corporate infrastructure, with automation in place of spreadsheets.* Keep the SOC 1, SOC 2, ISO 22301, and ISO 27001, 27017 and 27018 controls you own operating and audit ready, and carry them through surveillance audits.* Design security awareness and phishing resilience that makes staff the first line of defense rather than the weakest link.* Work with Infrastructure and Product Security so the boundary between corporate and production is explicit, enforced and tested.### What you bring#### Must-haves* Experience owning corporate security at a technology company, hands on, as the person who built and ran the controls.* Deep identity and access expertise across SSO and identity providers, MFA and passkeys, device trust and automated access lifecycle.* Endpoint and SaaS security in practice, including MDM, EDR and Google Workspace administration and investigation.* Experience building detection and running incident response for corporate systems, including a SIEM or equivalent.* Scripting and automation (Python, Bash, APIs) to automate controls and the evidence they produce.* Experience operating controls under SOC 2 or ISO 27001 and supporting audits.* Writing clear enough that an auditor and an engineer read the same document and both understand it.#### Nice-to-haves* Cloud security fundamentals on AWS.* Experience in fintech or another regulated, audited environment.* Experience running a macOS fleet at scale.* Business continuity and disaster recovery planning.### How we workWe are a distributed company headquartered in Paris. Our teams work from Europe, the US and Asia, with offices in New York, Geneva, Dubai, Singapore, Hong Kong and São Paulo. We write decisions down so they survive time zones. We hold our own work to the standards our clients are held to. We hire people who can own an outcome end to end and we give them the room to do it.### What we offerA competitive base salary set by role and location, a bonus or variable plan where the role carries one and stock options vesting over four years. Healthcare, flexible vacation, parental leave and a once-a-year home technology allowance, with travel expenses covered. A MacBook and the equipment you need to do your best work. Remote first, with an office if you want one.Base salary range: $150,000-250,000### Hiring processWe aim to complete the process in 2 weeks and we tell you where you stand after every step.* Intro call with Co-CEO (30 minutes).* Personality and cognitive assessments, completed on your own time (45 minutes).* Focus Interviews (about 3 hours): CISO (30 minutes), technical exercise (45 minutes), general security (45 minutes), design security (45 minutes) and culture fit (30 minutes).* Reference calls and background checks.### Equal opportunityDFNS is an equal opportunity employer and considers every applicant based on ability and potential, regardless of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, disability, age or any other characteristic protected by law. If you need an accommodation at any point in the process, tell us and we will arrange it.