# Staff Corporate Security Engineer

**Company:** [Crusoe](https://hotfix.jobs/companies/crusoe)
**Location:** San Francisco, CA
**Role:** Security Engineering
**Salary:** $210k – $255k/yr
**Experience:** 8+ years
**Skills:** Zero Trust, Sase, Ztna, Casb, Dlp, Okta, Google Workspace, Slack, SSO, SAML, OAuth, SCIM, Tpm, Secure Enclave, MFA
**Posted:** 2026-04-20

> Designs and implements Zero Trust, SASE, and identity-based security architectures to protect corporate networks, SaaS platforms, and AI systems. Requires 8+ years experience in SaaS security, IAM, DLP, and device trust.

## Job Description

## Responsibilities
- Lead design and implementation of Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) architectures, replacing legacy VPNs.
- Architect preventative SaaS security for Google Workspace, Slack, Okta, including CASB controls.
- Implement Binary Authorization and device trust with hardware-backed identity (TPM, Secure Enclave).
- Design and tune Data Loss Prevention (DLP) across endpoints and SaaS.
- Strengthen email security with MFA and session controls.
- Architect AI-native security frameworks for agent-based systems (e.g., MCP).
- Scale identity and access management (SSO, SAML, OAuth, SCIM, JIT access).
- Define and execute “Crown Jewels” security methodology for high-risk vulnerabilities.

## Requirements
- 8+ years designing Zero Trust, SASE, identity-based security architectures.
- Strong expertise in SaaS security (CASB, DLP, Google Workspace, Okta, Slack).
- Experience with device trust, endpoint security, hardware-backed identity.
- Strong IAM knowledge (SSO, SAML 2.0, OAuth, SCIM).
- Email security, phishing mitigation, session controls.
- Application vulnerabilities (IDOR, privilege escalation).
- AI security challenges, agent-based governance.

## Nice-to-Haves
- CASB and enterprise DLP at scale.
- Model Context Protocol (MCP) or AI orchestration.
- “Secure by Default” in high-growth orgs.
- Cloud-native or AI infrastructure background.

## Compensation
- $210,000 - $255,000 base + bonus + RSUs

## Similar roles

- [Staff Security Engineer, Application Security](https://hotfix.jobs/jobs/5214d92c-70cc-4cb3-aa3a-342e71db7789) - NinjaTrader - Chicago, IL - $210k – $260k/yr
- [Staff AppSec Engineer](https://hotfix.jobs/jobs/276da52a-633e-4899-bbe1-257843a4fa8b) - Upside - Washington, DC - $210k – $230k/yr
- [Staff Application Security Engineer](https://hotfix.jobs/jobs/7ac2e48a-851e-4e49-8cb6-83a44f82862c) - Upside - Remote - $210k – $230k/yr
- [Senior/Staff Software Systems Engineer](https://hotfix.jobs/jobs/778eda2f-9ba1-4e9e-9093-db9a8854300c) - Zoox - Foster City, CA - $208k – $300k/yr
- [Staff Software Engineer - Trust & Safety](https://hotfix.jobs/jobs/75025b27-cc32-4ffc-9305-540d29ca5599) - Rula - Remote - $207k – $243k/yr

**Apply:** https://hotfix.jobs/jobs/b96b394f-21ee-4d9d-8bd8-4c821ffcef81
**Canonical:** https://hotfix.jobs/jobs/b96b394f-21ee-4d9d-8bd8-4c821ffcef81