Security Engineer

📋 Description

• Own identity as a program, not a ticket queue. Drive down standing access and manual provisioning
• Harden and continuously improve our cloud-native environment (GCP-first): organization policy, IAM
• Own the vulnerability management program: asset coverage, risk-based prioritization that weighs
• Build detection coverage for identity, cloud, and SaaS. Share in the security escalation rotation
• Secure our AI footprint: non-human and agent identity, MCP server and tool-permission scoping
• Design and ship agentic security workflows: alert triage and enrichment, evidence collection

🎯 Requirements

• 5+ years in security engineering, with real depth in at least two of: identity and access
• Hands-on identity operations experience — SSO/SAML/OIDC, MFA and conditional access, device trust
• Experience securing cloud-first or cloud-native environments. GCP preferred; strong AWS or Azure
• Scripting and automation ability — Python, Go, or similar — sufficient to build tooling and API
• Incident response experience as a primary responder or lead on high-severity incidents, including
• Genuine enthusiasm for AI, and hands-on experience building with LLMs or agent frameworks