Senior IT Security Engineer

Komodo Health

. Engineer and run Corporate IT Security across identity, devices, endpoints, internal networks, workforce SaaS and AI tools .

Posted 11/2/2026full-timeRemote • United StatesSenior💰 $150,000 - $215,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in corporate IT security, focusing on identity management, device assurance, and incident response. Proficient in implementing security measures for sensitive healthcare data and collaborating with cross-functional teams to ensure compliance and governance.

Highest-signal resume keywords

Corporate IT SecurityIncident Commander ExperienceHands-On Engineering of Corporate ControlsEnterprise Identity ProvidersProduction-Quality Scripting in Python

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity ManagementDevice AssuranceConditional AccessSAMLOIDCOAuth 2.0SCIMMDMEDRLifecycle Automation

Soft Skills

Clear WritingExecutive CommunicationInfluence Across Teams

Tools & Technologies

SaaS PlatformsSecurity Tools IntegrationAPI PermissionsAudit LoggingPhishing-Resistant MFA

Certifications & Qualifications

GCIHCISSP

Industry Keywords

HealthcareLife SciencesRegulated DataComplianceSecurity Operations

Tech Stack

Tools & technologies

CloudMacOSPython

About the role

Key responsibilities & impact

Engineer and run Corporate IT Security across identity, devices, endpoints, internal networks, workforce SaaS and AI tools
Protect the employee environment and support security for sensitive healthcare data
Lead corporate-environment incidents as Incident Commander under the company incident response program
Partner with Legal, Compliance and business leaders on security matters
Perform hands-on configuration, scripting, investigation and remediation, comprising at least 70% of the role
Assess corporate identity, devices and SaaS and create a sequenced remediation backlog
Implement phishing-resistant MFA, SSO enforcement, session and sign-on policies, least-privilege admin roles and service-account governance
Implement device trust and conditional access across macOS and Windows using MDM and EDR
Ensure application provisioning and deprovisioning through the identity provider and maintain access-review evidence
Govern SaaS data export, API access, sessions, OAuth apps, connected applications and audit logs
Define identity, endpoint and SaaS-abuse detection use cases with Security
Coordinate IT, Legal, Compliance and Communications during incidents; drive investigation and remediation
Run blameless post-incident reviews and track follow-ups to completion
Establish workforce AI guardrails covering approved tools, SSO, RBAC, retention, logging, access reviews and integrations
Run tabletop exercises and establish governance for shadow IT, risky OAuth grants and workforce AI adoption

Requirements

What you’ll need

6–8+ years in corporate security, IT security, security engineering or security operations
4+ years of hands-on engineering of corporate controls at a cloud-native or SaaS company
Deep hands-on experience with enterprise identity providers and SAML, OIDC, OAuth 2.0 and SCIM
Experience with sign-on and session policies, device assurance or conditional access, and lifecycle automation
Hands-on experience with device trust, MDM and EDR across macOS and Windows
Experience hardening productivity suites and major SaaS platforms, including admin roles, export and API permissions, OAuth app governance and audit logging
Experience defining detection use cases and writing or tuning detection rules with a security operations team
Experience serving as incident commander or lead responder on real security incidents
Production-quality scripting in Python or similar and experience integrating security tools through APIs
Experience producing control evidence for SOC 2 and other audits
Clear writing and executive communication; ability to translate technical risk into business impact and decisions
Ability to work through influence across IT, Engineering, Security, Legal, People and Procurement
Experience partnering with Legal and Compliance on investigations, audits or regulatory reviews
Required use of AI for triage, investigation, documentation and automation with human accountability
Experience in healthcare, life sciences or regulated-data environments is prioritized
Certifications such as GCIH or CISSP are nice to have

Benefits

Comp & perks

Performance-based bonuses may be available
Equity awards may be available
Comprehensive health insurance
Dental insurance
Vision insurance
Flexible time off and holidays
401(k) with company match
Disability insurance
Life insurance
Leaves of absence in accordance with applicable laws and company policy
Hybrid work model / flexibility