Staff Corporate Security Engineer

DFNS is hiring a Staff Corporate Security Engineer to own and strengthen corporate security across its distributed company. The role focuses on identity, endpoints, SaaS, detection and response, asset and vulnerability management, and maintaining audit-ready security controls.

Responsibilities:

• Own identity and access across the company (SSO, MFA, passkeys, device trust, automated joiner, mover and leaver flows) so that who has access to what is provable at any moment
• Harden and manage endpoints and the SaaS estate, from MDM and EDR to Google Workspace and the tools we run the company on
• Build detection and response for corporate systems, from centralized logging and alerting to runbooks, and lead the response when something happens
• Run asset inventory and vulnerability management for corporate infrastructure, with automation in place of spreadsheets
• Keep the SOC 1, SOC 2, ISO 22301, and ISO 27001, 27017 and 27018 controls you own operating and audit ready, and carry them through surveillance audits
• Design security awareness and phishing resilience that makes staff the first line of defense rather than the weakest link
• Work with Infrastructure and Product Security so the boundary between corporate and production is explicit, enforced and tested

Requirements:

• Experience owning corporate security at a technology company, hands on, as the person who built and ran the controls
• Deep identity and access expertise across SSO and identity providers, MFA and passkeys, device trust and automated access lifecycle
• Endpoint and SaaS security in practice, including MDM, EDR and Google Workspace administration and investigation
• Experience building detection and running incident response for corporate systems, including a SIEM or equivalent
• Scripting and automation (Python, Bash, APIs) to automate controls and the evidence they produce
• Experience operating controls under SOC 2 or ISO 27001 and supporting audits
• Writing clear enough that an auditor and an engineer read the same document and both understand it
• Cloud security fundamentals on AWS
• Experience in fintech or another regulated, audited environment
• Experience running a macOS fleet at scale
• Business continuity and disaster recovery planning