Sr. Corporate Security Engineer

Required

• You treat the IdP, the device fleet, and the SaaS estate as one system, and you harden the paths between them rather than each tool in isolation.
• When a job requires someone to do something manually and repetitively, your instinct is to build the system that makes that job unnecessary.
• You work through design decisions by asking questions on both sides, and when the call goes against you, you respect it and build it.
• Bonus: you have written a technical paper, spoken at a technical conference, or maintain open-source security tooling.
• Operator Depth: 6+ years in corporate or enterprise security or detection and response, with hands-on ownership of a SIEM, detection content, and incident response.
• Software Engineering: Comfortable in Python, Go, or TypeScript working directly against vendor APIs. You automate enforcement rather than configuring it by hand.
• Identity Fundamentals: Deep understanding of OAuth, SAML/OIDC, session and token lifecycle, and how identity reaches cloud IAM.
• Endpoint Fluency: You have managed a Mac fleet with a modern MDM and EDR and taken it from deployed to enforced.
• Applied LLM Judgment: You have built or seriously experimented with LLM-driven workflows, including prompting, tool use, and evaluation, and can explain how you would know whether one is doing a good job.
• Software Development (nice to have): You have contributed detection logic or security features to a product codebase and are comfortable working inside an engineering team's review and release process.
• How You Work: Collaborative, curious, direct. You work well next to more junior engineers without taking over, and you would rather engineer a problem away than staff it.
• Material Security is a remote-first workplace with an office in San Francisco, California.