Senior Corporate Security Engineer

Description

The company is adding this remote role in the United States to extend security operations beyond EU hours and to add hands-on capacity to the team.

The goal is to detect, triage, and respond to issues faster across the working day.

The work covers endpoint protection, device management, identity and access, and detection and response, including the SIEM and coordination with the external SOC. You will respond to incidents and help harden the environment so there are fewer of them. You will also help run ISO 27001 and SOC 2 controls by operating them and collecting evidence.

You will work with IT, Product Security, and Compliance in a distributed team and have room to improve how corporate security runs.

The company builds Kubernetes-native AI infrastructure and is part of IREN. Its products let organizations run scalable, secure, sovereign infrastructure on-premises, in the cloud, at the edge, or in sovereign data centers.

Responsibilities

• Set and own security policies, hardening baselines, and compliance posture for the EDR and MDM stack across all devices and operating systems, and lead endpoint threat response.
• Work with IT, who handle daily enrollment and administration, to keep devices enrolled, compliant, and protected.
• Run and tighten IAM, SSO, and MFA, including provisioning, deprovisioning, and least-privilege access reviews, while keeping the identity layer workable for staff with IT.
• Operate the SIEM and detection tools by tuning rules, triaging alerts, and investigating suspicious activity. Coordinate monitoring and escalations with the external SOC.
• Lead incident response from investigation through containment, remediation, and root cause analysis. Help write post-incident reviews and runbooks.
• Provide US-hours ownership for security work that currently depends on EU coverage.
• Operate, integrate, and improve the broader corporate security toolset. Harden configurations and access controls and reduce attack surface to prevent incidents.
• Operate and evidence the controls required by ISO 27001, SOC 2, and related frameworks. Work with Compliance on audits, control mapping, and evidence collection.
• Track vulnerabilities on endpoints and corporate systems and help remediate them. Follow relevant threats and turn them into posture improvements.
• Run and improve the security awareness program, including training, phishing simulations, and employee guidance.
• Work with IT, Product Security, and Compliance, cover US time zones, and hand off work cleanly to EU colleagues.

Requirements

• At least 4 years in corporate or enterprise security, security operations, or IT security engineering.
• Hands-on experience with EDR on macOS and Windows.
• Plus: experience with MDM and managing Linux endpoints.
• Strong knowledge of SSO, MFA, and modern IAM platforms such as Okta, Entra ID/Azure AD, and Google Workspace, along with least-privilege practices.
• Experience operating a SIEM and detection tools, including writing and tuning rules, triaging alerts, and investigating suspicious activity.
• Preferred: Splunk experience.
• Practical incident response experience covering investigation, containment, remediation, and root cause analysis, and comfort coordinating with an external SOC or MSSP.
• Solid grasp of security fundamentals, including network and host hardening, common attack techniques, and reducing attack surface.
• Familiarity with ISO 27001 and SOC 2, and experience operating or evidencing security controls.
• Experience with vulnerability management and turning findings into concrete remediation.
• A collaborative style, clear written communication, and reliable handoffs across time zones.
• Based in the United States and able to provide security operations coverage during US business hours.
• Strong plus: scripting in Python, Bash, or PowerShell to automate security operations. If you lack it, you should be able to show you can pick it up quickly.
• Plus: experience running security awareness and phishing simulation programs.
• Plus: certifications such as Security+, GIAC GCIH or GCIA, CISSP, or vendor-specific EDR, SIEM, or IAM certifications.
• Plus: exposure to cloud and SaaS security posture on AWS, Google Workspace, or M365.

Conditions

Remote role, based in the United States.

Work covers US business hours to extend security operations coverage.

Benefits

• Join an established leader in cloud infrastructure in Silicon Valley.
• Work with talented colleagues who help Fortune 500 and Global 2000 customers adopt next-generation cloud technologies.
• Contribute to open-source innovation.
• Work at a young company that values openness, collaboration, risk-taking, and growth.
• Professional development and training.
• Attend conferences and working groups.
• Company outings, happy hours, hackathons, and tech talks.
• Competitive compensation and a strong benefits plan.