Staff Security Engineer

Responsibilities

• Develop, maintain, and scale endpoint security solutions including EDR, DLP, secure browser, MDM, and AI security solutions across multi-cloud, multi-SaaS environments.
• Own the technical roadmap for endpoint security tooling.
• Build intelligent security platforms and automate security operations using AI and software engineering to reduce toil, increase detection fidelity, and accelerate response.
• Monitor security events, investigate incidents, and build real-time detection and prevention systems.
• Develop threat intelligence pipelines.
• Conduct regular risk and threat analyses to identify and remediate vulnerabilities; apply zero-trust principles.
• Develop and implement unified security policies, procedures, and standards for endpoint protection, aligned with regulatory and compliance frameworks.
• Partner with Security, Engineering, IT, and Product teams to define strategy, drive secure engineering practices, and provide technical guidance.
• Champion security culture through enablement and education.
• Establish high standards for security engineering including threat modeling, secure design, detection quality, and incident response.
• Mentor engineers and advance the team's craft.

Requirements

• 5+ years of hands-on experience in information security (security engineering, threat intelligence or detection, or incident response) with a strong focus on endpoint security.
• Proficiency in software development using Python, Go, Java, C, C++, or JavaScript, with strong experience using AI-assisted development.
• Hands-on experience designing, deploying, and maintaining endpoint security tools (EDR, DLP, MDM, secure browsers, AI security solutions) across Windows, macOS, and Linux.
• Strong understanding of operating systems, network protocols, application platforms, endpoint security concepts, and best practices.
• Experience leading technical projects independently, driving data-informed decisions, and executing end-to-end.
• Bachelor's degree in Computer Science, Information Security, or related technical field (or equivalent practical experience).

Nice-to-Haves

• Master's degree in Information Security, Computer Science, or related technical field.
• Experience with infrastructure from major cloud providers (AWS, GCP, Azure) and enterprise SaaS platforms at scale.
• Relevant industry certifications such as CISSP, CEH, or Security+.
• Demonstrated ability to communicate complex security concepts to technical and non-technical audiences, including executives.