Security Engineer, Corporate Security

📋 Description

• Advance identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation
• Build detections and guardrails to catch account takeover, MFA fatigue attacks, and session token
• Write and ship device policy as code (configuration profiles, remediation scripts, enforcement
• Maintain and improve EDR stack detection and response coverage across the fleet.
• Reduce SaaS risk at scale through SSPM tooling and automation, including detection of risky OAuth
• Own security configuration for critical SaaS tools (Google Workspace, Slack, etc.) and keep pace

🎯 Requirements

• Typically 2–5 years of experience in corporate, enterprise, or IT security engineering (emphasis on
• Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta
• Comfort writing real code or scripts (Python, Go, or similar) to automate manual, ticket-driven
• Clear, practical communicator able to explain control tradeoffs to engineers, salespeople, and VPs

🎁 Benefits

• Broad, real ownership: own well-defined projects end to end from design through rollout with
• Immediate impact: every device policy or identity control protects every Flexporter, no long
• Part of PSI (Platform & Security Infrastructure): security treated as infrastructure to build