Security Engineer (Corporate Security)

Join Persona, an identity verification company where security is at the core of everything we do. As a Security Engineer, you will work alongside experienced security engineers to defend our people, devices, and systems against evolving threats. You will develop and operate endpoint detection and response (EDR) rules, implement security best practices, build tools and automation to scale security controls, and harden corporate infrastructure and SaaS applications against attack. This is an enterprise security role embedded in a generalist security team.

• Développer, ajuster et exploiter les règles et les outils de détection et de réponse aux points de terminaison (EDR) dans l'environnement macOS de l'entreprise.
• Collaborer avec l'équipe TechOps pour mettre en œuvre les meilleures pratiques de sécurité dans les environnements SaaS et de points de terminaison, y compris l'application de l'authentification à deux facteurs (2FA).
• Construire des outils et des automatisations pour étendre les contrôles de sécurité et la surveillance sans augmenter le personnel.
• 3+ years of experience in IT security, corporate/enterprise security, or a related technical role. We'll flex on years of experience and specific tool background for candidates who demonstrate strong fundamentals, high aptitude, and a track record of figuring things out fast
• Ability to write scripts and automate workflows in Python, Ruby, Bash, or similar; comfortable with SQL
• Experience with email security fundamentals and social engineering defense
• Experience with endpoint hardening. You’ve hardened endpoints, not written requirements asking someone else to do it
• Experience in a high-growth startup or other fast-moving, resource-constrained environment
• Communicates clearly about security topics with non-technical stakeholders
• Hands-on experience with macOS endpoints, MDM platforms, and EDR tooling
• Experience with DLP concepts and insider threat scenarios
• You've worked somewhere where PII or sensitive data was the core product
• Familiarity with SaaS security posture management (SSPM) or CASB concepts
• Exposure to SIEM platforms, log aggregation, or detection engineering
• Experience with Zero Trust or network access tools (Twingate, Cloudflare Access, or similar)
• Familiarity with identity and access management tooling (Okta, SCIM provisioning, SSO)