Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Material Security

Senior Corporate Security Engineer

Material Security

. Own corporate telemetry and detection content .

Posted 10/16/2026full-timeRemote • California • United StatesSenior💰 $220,000 - $240,000 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in corporate security and incident response, with a strong focus on detection content, telemetry management, and automation of security processes. Proficient in Python, Go, or TypeScript, with a deep understanding of OAuth, SAML/OIDC, and identity management in cloud environments.

Highest-signal resume keywords
6+ Years In Corporate SecurityHands-On SIEM OwnershipPython, Go, Or TypeScript ProficiencyExperience Managing Mac FleetLLM-Driven Workflow Development

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Detection Content DevelopmentIncident Response ManagementOAuth And SAML/OIDC ExpertiseEDR Coverage EnhancementAutomated Access-Review EvidenceTelemetry ManagementDetection Logic ContributionsEvaluation Set CreationPrivileged Access ReviewBYOD Posture Enforcement
Soft Skills
Collaborative Working StyleCurious MindsetDirect CommunicationMentorship Of Junior Engineers
Tools & Technologies
SIEMMDMGoogle WorkspaceEDRDLPOAuth GovernanceApps Script Governance
Industry Keywords
Corporate SecurityDetection And ResponseIncident Response PlaybooksTelemetry And DetectionIdentity ManagementCloud IAMPhishing-Resistant Authentication

Tech Stack

Tools & technologies
AndroidCloudiOSPythonTypeScriptGo

About the role

Key responsibilities & impact
  • Own corporate telemetry and detection content
  • Close detection coverage gaps and reduce noise with measured fidelity
  • Build detections for account takeover, session token theft, malicious OAuth grants, admin abuse, and insider exfiltration
  • Lead corporate incident response and own playbooks
  • Design and build an LLM-driven agent for near-real-time review of privileged access grants, customer data access, and high-fidelity endpoint and identity alerts
  • Create labeled evaluation sets and measure precision and recall
  • Define limits on automated action and defend against manipulation through log content or employee replies
  • Manage Mac fleet devices and endpoint detection with the CorpSec team
  • Automate update enforcement, deepen EDR coverage, deploy browser-level DLP, and enforce BYOD posture on iOS and Android
  • Maintain the identity provider and SaaS estate
  • Maintain phishing-resistant authentication, address applications without SSO, automate access-review evidence, and pipeline vendor and OAuth application review
  • Manage Google Workspace admin alerting, OAuth governance, Apps Script governance, sharing, and DLP
  • Partner with Engineering to test and ship detection updates based on the company’s own Google Workspace tenant
  • Work with AppSec on corporate-to-production boundary detections, just-in-time access, and logging
  • Turn corporate security learnings into product detection improvements for customers

Requirements

What you’ll need
  • 6+ years in corporate or enterprise security or detection and response
  • Hands-on ownership of a SIEM, detection content, and incident response
  • Comfortable in Python, Go, or TypeScript working directly against vendor APIs
  • Deep understanding of OAuth, SAML/OIDC, session and token lifecycle, and how identity reaches cloud IAM
  • Experience managing a Mac fleet with modern MDM and EDR and taking it from deployed to enforced
  • Experience building or seriously experimenting with LLM-driven workflows, including prompting, tool use, and evaluation
  • Ability to explain how to measure LLM workflow performance
  • Collaborative, curious, and direct working style
  • Experience working alongside more junior engineers without taking over
  • Nice to have: contributions of detection logic or security features to a product codebase
  • Bonus: technical paper, technical conference presentation, or open-source security tooling

Benefits

Comp & perks
  • Remote-first workplace
  • Office in San Francisco, California
  • Equal employment opportunity and inclusive work environment