Security Engineer

we are looking for a Security Engineer. The Security team protects endpoints, identities, SaaS applications, and the fast-growing landscape of AI tools and agents used across the company. In this role, you will operate and improve our security stack, handle detection and response across the organization, and drive security controls around identity, endpoints, SaaS, and AI adoption - governing AI assistants, coding agents, and MCP integrations while keeping employees productive.

You will report to the IT Security & GRC Lead and work closely with IT, GRC, R&D, external vendors, and the wider security team.What You'll Be Doing:Operate and maintain our corporate security stack: EDR (CrowdStrike Falcon), IdP (Okta), MDM (IRU), email security, and browser/SaaS security controlsExperience hardening endpoints and enforcing device policy via MDM/EDR - security baselines, disk encryption, local admin restrictions, and USB/peripheral controlsMonitor security alerts, respond to incidents, and perform forensic investigations across endpoints, identities, and SaaSMaintain identity security controls - SSO/MFA coverage, privileged access, joiner/mover/leaver, and access reviewsSecure our SaaS footprint - security posture, configuration monitoring, and third-party integration hygiene across Google Workspace, Slack, Okta, and other core platformsImplement and maintain DLP controls across email, endpoints, and SaaSRun endpoint patching and vulnerability management, and coordinate remediation with owning teamsRun POCs and rollouts of IT security tools - evaluating vendors, testing controls, and deploying them in collaboration with IT and external vendorsSecure the company's use of AI tools - implement guardrails for AI assistants, coding agents, and MCP integrations, and build detections for AI-specific threats such as prompt injection and data exfiltration via connectorsRequirements: Experience operating EDR/XDR, IdP/SSO, and MDM platforms (CrowdStrike, Okta, IRU/Jamf or equivalents)4 years of hands-on experience as a security engineer in a cloud-native / SaaS-first companyHands-on experience implementing and tuning DLP controls across email, endpoints, Experience in a cloud native high-scale SaaS or fintech environmentHands-on experience with LLM-based tools and agents (coding agents, AI assistants, MCP) and a solid understanding of their security risks - prompt injection, tool/connector abuse, data leakage, over-permissioned integrationsProven hands-on experience with incident response and forensic investigation in SaaS environmentsExperience assessing SaaS and third-party integrations (OAuth scopes, API access, data flows)Strong communicator, able to explain security risks to technical and non-technical stakeholdersProfessional English (written and spoken)Bachelor's degree in Computer Science, Information Security, or equivalent practical experienceThis position is open to all candidates.