FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.

Senior Corporate Security Engineer
Material Security. Own corporate telemetry and detection content .
Posted 10/16/2026full-timeRemote • California • United StatesSenior💰 $220,000 - $240,000 per yearWebsite
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in corporate security and incident response, with a strong focus on detection content, telemetry management, and automation of security processes. Proficient in Python, Go, or TypeScript, with a deep understanding of OAuth, SAML/OIDC, and identity management in cloud environments.
Highest-signal resume keywords
6+ Years In Corporate SecurityHands-On SIEM OwnershipPython, Go, Or TypeScript ProficiencyExperience Managing Mac FleetLLM-Driven Workflow Development
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Detection Content DevelopmentIncident Response ManagementOAuth And SAML/OIDC ExpertiseEDR Coverage EnhancementAutomated Access-Review EvidenceTelemetry ManagementDetection Logic ContributionsEvaluation Set CreationPrivileged Access ReviewBYOD Posture Enforcement
Soft Skills
Collaborative Working StyleCurious MindsetDirect CommunicationMentorship Of Junior Engineers
Tools & Technologies
SIEMMDMGoogle WorkspaceEDRDLPOAuth GovernanceApps Script Governance
Industry Keywords
Corporate SecurityDetection And ResponseIncident Response PlaybooksTelemetry And DetectionIdentity ManagementCloud IAMPhishing-Resistant Authentication
Tech Stack
Tools & technologiesAndroidCloudiOSPythonTypeScriptGo
About the role
Key responsibilities & impact- Own corporate telemetry and detection content
- Close detection coverage gaps and reduce noise with measured fidelity
- Build detections for account takeover, session token theft, malicious OAuth grants, admin abuse, and insider exfiltration
- Lead corporate incident response and own playbooks
- Design and build an LLM-driven agent for near-real-time review of privileged access grants, customer data access, and high-fidelity endpoint and identity alerts
- Create labeled evaluation sets and measure precision and recall
- Define limits on automated action and defend against manipulation through log content or employee replies
- Manage Mac fleet devices and endpoint detection with the CorpSec team
- Automate update enforcement, deepen EDR coverage, deploy browser-level DLP, and enforce BYOD posture on iOS and Android
- Maintain the identity provider and SaaS estate
- Maintain phishing-resistant authentication, address applications without SSO, automate access-review evidence, and pipeline vendor and OAuth application review
- Manage Google Workspace admin alerting, OAuth governance, Apps Script governance, sharing, and DLP
- Partner with Engineering to test and ship detection updates based on the company’s own Google Workspace tenant
- Work with AppSec on corporate-to-production boundary detections, just-in-time access, and logging
- Turn corporate security learnings into product detection improvements for customers
Requirements
What you’ll need- 6+ years in corporate or enterprise security or detection and response
- Hands-on ownership of a SIEM, detection content, and incident response
- Comfortable in Python, Go, or TypeScript working directly against vendor APIs
- Deep understanding of OAuth, SAML/OIDC, session and token lifecycle, and how identity reaches cloud IAM
- Experience managing a Mac fleet with modern MDM and EDR and taking it from deployed to enforced
- Experience building or seriously experimenting with LLM-driven workflows, including prompting, tool use, and evaluation
- Ability to explain how to measure LLM workflow performance
- Collaborative, curious, and direct working style
- Experience working alongside more junior engineers without taking over
- Nice to have: contributions of detection logic or security features to a product codebase
- Bonus: technical paper, technical conference presentation, or open-source security tooling
Benefits
Comp & perks- Remote-first workplace
- Office in San Francisco, California
- Equal employment opportunity and inclusive work environment