Security Engineer (Enterprise)

Join Persona, an identity verification company where security is at the core of everything we do. As a Security Engineer, you will work alongside experienced security engineers to defend our people, devices, and systems against evolving threats. You will develop and operate endpoint detection and response (EDR) rules, implement security best practices, build tools and automation to scale security controls, and translate telemetry into actionable mitigations. This is an enterprise security role embedded in a generalist security team.

• Développer, ajuster et exploiter les règles et les outils de détection et de réponse aux points de terminaison (EDR) dans l'environnement macOS.
• Collaborer avec l'équipe TechOps pour mettre en œuvre les meilleures pratiques de sécurité dans les environnements SaaS et de points de terminaison.
• Construire des outils et des automatisations pour étendre les contrôles de sécurité et la surveillance sans augmenter le personnel.
• Ability to write scripts and automate workflows in Python, Ruby, Bash, or similar; comfortable with SQL
• Hands-on experience with macOS endpoints, MDM platforms, and EDR tooling
• Experience with DLP concepts and insider threat scenarios
• Experience in a high-growth startup or other fast-moving, resource-constrained environment
• Experience with endpoint hardening. You’ve hardened endpoints, not written requirements asking someone else to do it
• Communicates clearly about security topics with non-technical stakeholders
• 3+ years of experience in IT security, corporate/enterprise security, or a related technical role. We'll flex on years of experience and specific tool background for candidates who demonstrate strong fundamentals, high aptitude, and a track record of figuring things out fast
• Experience with email security fundamentals and social engineering defense
• You've worked somewhere where PII or sensitive data was the core product
• Familiarity with SaaS security posture management (SSPM) or CASB concepts
• Exposure to SIEM platforms, log aggregation, or detection engineering
• Experience with Zero Trust or network access tools (Twingate, Cloudflare Access, or similar)
• Familiarity with identity and access management tooling (Okta, SCIM provisioning, SSO)