Security Engineer

WHAT YOU WILL DO

• Build out our security monitoring capability: select and run the SIEM, decide what's worth alerting on, and tune out the noise.

• Own incident response end-to-end, from investigation through to a post-mortem and a fix that holds.

• Harden the environment hands-on across endpoint and EDR, identity and access, network, and infrastructure.

• Finish maturing Zero Trust: identity and device posture as joint conditions for access, and MFA everywhere.

• Handle the long tail of edge cases that comes with a fast-growing team and a lot of contractors.

• Secure our Google-centric workplace, where most of our IP moves — DLP, data classification and labeling, retention, and context-aware access.

• Secure the software supply chain in collaboration with our platform team: source control, access boundaries, secrets, and CI/CD.

• Run vulnerability and attack surface management, and drive remediation to be done with the teams that own the systems.

• Set and monitor our physical security standard with Business Operations, who implement it on site: access zones, CCTV and alerting, visitor and contractor access, and site access as one joiner-mover-leaver process with digital access, across multiple locations.

• Give our compliance work the technical substance it needs: evidence, remediation, and support through audits and pen tests.

WHO YOU ARE

Must have

• You have 5+ years hands-on in security engineering, with real depth in identity, endpoint, and infrastructure.

• You have built or substantially operated a SIEM, and run real incidents end-to-end.

• You have implemented Zero Trust in production - unified IdP and MDM, conditional access, device posture.

• You know Google Workspace Enterprise security well, or can get there fast from an equivalent platform.

• You are automation-first: Terraform, and scripting in Python, Bash, or PowerShell are no strangers to you.

• You are fluent in CIS Benchmarks, NIST, ISO 27001, and NIS2 without being ruled by them.

• You can turn a technical finding into a business impact and actionable solutions.

Nice to have

• Interest or a track record in AI security.

• Hands-on cloud and container security: GCP, containers, Kubernetes.

• Certifications such as CISSP, GCIA, GCIH, CCSP, or Google Cloud Professional Cloud Security Engineer.

• Experience in a regulated, export-controlled, or high-security environment, where physical and digital security meet.

INTERVIEW PROCESS

• Recruiter Interview (30-60 min)

• Technical Screening (30 min)

• Technical Panel (3x60 min)

• CEO call (30 min)

This role sits at L2/L3 of our framework, please inquire during the recruitment process for further information.