Member of Technical Staff, Enterprise Security

Description

The company builds AI-powered video creation and next-generation creative tools and is scaling faster than most generative AI firms. It reports a $1B annual revenue run rate, 30M+ users, 6M+ generations per day, and 390 Fortune 500 brands using its products.

You will be a hands-on engineer responsible for security across corporate systems, employee devices, identities, and SaaS applications as the company grows globally.

You will work with IT, Infrastructure Security, and Engineering to build technical controls, automate security operations, and tighten access governance. You will personally build, configure, and run these systems.

The role calls for broad corporate security knowledge, sound technical judgment, and the ability to rank real risks in a fast-moving setting.

Responsibilities

• Secure corporate laptops and other devices through Microsoft Intune or MDM, covering enrollment, compliance, and the full device lifecycle.
• Run EDR and XDR tooling for endpoint threat detection, investigation, and remediation.
• Define endpoint hardening standards and security baselines together with IT and Engineering.
• Manage the Microsoft Entra ID environment, including SSO, SAML, SCIM, MFA, Conditional Access, and RBAC.
• Run joiner, mover, and leaver processes so access is granted securely and removed promptly across SaaS apps.
• Administer password management, privileged access, and credential controls.
• Carry out access reviews and apply least-privilege and Zero Trust principles.
• Assess new SaaS tools, keep the approved application list current, and find shadow IT.
• Harden corporate collaboration platforms such as email, Slack, and file sharing.
• Check application configurations, permissions, and authentication settings.
• Run security awareness work, including phishing simulations and staff training.
• Monitor and triage alerts from identity systems, endpoints, and corporate applications.
• Build detections for compromised accounts, suspicious activity, and endpoint threats.
• Automate provisioning, access reviews, compliance checks, and security workflows with scripts and APIs.
• Work with Infrastructure Security to feed endpoint and identity signals into central monitoring.
• Lead incident investigation, containment, and remediation.
• Rank enterprise security risks by business impact.
• Take security projects from technical design through rollout and ongoing operation.
• Set scalable security standards and practical engineering controls.
• Work across teams to improve security without slowing the business.

Requirements

• At least 4 years of hands-on work in enterprise security, corporate IT security, or security engineering, ideally at a fast-growing technology company.
• You have personally built, configured, and operated corporate security systems.
• You have solid experience with Microsoft Entra ID, single sign-on, SAML, SCIM, multi-factor authentication, Conditional Access, and managing identity lifecycles.
• You have practical experience with Microsoft Intune or MDM, endpoint compliance, and EDR/XDR.
• You have secured SaaS applications, collaboration tools, and privileged access.
• You script and automate in Python, PowerShell, Bash, or similar languages.
• You have experience with security monitoring, incident investigation, and remediation.
• You understand Zero Trust, least-privilege access, and corporate security practice.
• You bring sound judgment, independent problem solving, and wide knowledge across corporate security areas.

Conditions

Base salary range is $200,000 - $300,000, depending on experience, skills, scope, and location.

Hybrid role based in the San Francisco Bay Area: three full days per week in the San Francisco office, with remaining days remote.

You must be available during agreed working hours and keep sufficient overlap with the relevant team's time zone.

The company values in-person collaboration, active communication, responsiveness, and close work across teams.

Equal opportunity employer: the company does not discriminate on the basis of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.

Benefits

• Eligible for the discretionary annual bonus program.
• Eligible to join the stock option program and share in long-term growth.
• Medical, dental, and vision insurance.
• 401(k) retirement plan with company matching.
• Additional benefits and perks.
• Work on ambitious AI products with an experienced, fast-moving, international team.
• Significant ownership, direct impact, and opportunities for professional growth as the company scales.