Zero-Trust Endpoint Security Engineer

Hillspire; San Francisco (CA); On-site; USD 200,000 - 225,000; Full time

Job summary

Hillspire seeks a seasoned Endpoint & SaaS Security Engineer to build a modern security program at our San Francisco headquarters. The role protects endpoints and SaaS platforms while maturing Zero Trust with emphasis on device posture, insider threat prevention, automation, and AI.

This hands-on engineering role offers significant ownership and the opportunity to shape security across endpoint, SaaS, and AI domains. Full-time in SF with contract-to-hire.

Qualifications

• Minimum 5+ years in cybersecurity engineering.
• Experience securing Windows and macOS endpoints.
• Experience with MDR solutions.
• Experience implementing Zero Trust security.
• Knowledge of insider threat detection techniques.
• Experience with SaaS security and Shadow IT governance.
• Experience supporting BYOD environments.

Responsibilities

• Own endpoint health, config, and security improvements.
• Administer Sophos Endpoint Protection, XDR, and MDR.
• Maintain 100% endpoint visibility and protection.
• Investigate and remediate compromised endpoints.
• Advance AI and automation to improve security operations.
• Develop and enforce Zero Trust controls across users and devices.
• Lead security for SaaS platforms and onboarding.

Skills

Endpoint security

Windows endpoint security

macOS endpoint security

MDR experience

Zero Trust

Insider threat detection

SaaS security

Shadow IT governance

BYOD environments

Automation

AI security

Tools

Sophos Central

Splunk Enterprise Security

CrowdStrike

Okta

Google Workspace security

CASB/SSPM

Job description

Hillspire seeks a seasoned Endpoint & SaaS Security Engineer to build a modern security program at our San Francisco headquarters. The role protects endpoints and SaaS platforms while maturing Zero Trust with emphasis on device posture, insider threat prevention, automation, and AI.

This hands-on engineering role offers significant ownership and the opportunity to shape security across endpoint, SaaS, and AI domains. Full-time in SF with contract-to-hire.