Senior Corporate Security Engineer

Mirantis

. Define and own security policies, hardening baselines, and compliance posture for EDR and MDM across the fleet .

Posted 9/29/2026full-timeRemote • KazakhstanSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security policy definition, incident response, and endpoint security management, with a strong focus on compliance with ISO 27001 and SOC 2 standards. Proficient in vulnerability management, IAM/SSO practices, and operating SIEM tools to enhance organizational security posture.

Highest-signal resume keywords

Endpoint Security (EDR)IAM/SSO ManagementSIEM OperationIncident ResponseVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Endpoint Security (EDR)IAM/SSO ManagementSIEM OperationIncident ResponseVulnerability ManagementScripting (Python, Bash, PowerShell)Device Management (MDM)Network HardeningHost HardeningAttack-Surface Reduction

Soft Skills

Collaborative Working StyleClear Written Communication

Tools & Technologies

SplunkSecurity Awareness Training ToolsPhishing Simulation ToolsCorporate Security Toolset

Certifications & Qualifications

Security+GIACGCIHGCIACISSP

Industry Keywords

ISO 27001SOC 2ComplianceThreat ResponseExternal SOC Coordination

Tech Stack

Tools & technologies

AWSCloudLinuxMacOSPythonSplunk

About the role

Key responsibilities & impact

Define and own security policies, hardening baselines, and compliance posture for EDR and MDM across the fleet
Drive threat response on endpoints and partner with IT on device enrollment, compliance, and protection
Administer and strengthen IAM/SSO, MFA, provisioning/deprovisioning, and least-privilege access reviews
Operate SIEM and detection tooling by tuning rules, triaging alerts, and investigating suspicious activity
Coordinate monitoring and escalations with the external SOC
Participate in incident response from investigation through containment, remediation, and root cause analysis
Contribute to post-incident reviews and runbooks
Operate, integrate, and improve the corporate security toolset
Proactively harden the environment through configuration baselines, access controls, and attack-surface reduction
Support ISO 27001, SOC 2, and related compliance efforts through control operation and evidence collection
Partner with Compliance on audits and control mapping
Track and help remediate vulnerabilities across endpoints and corporate systems
Monitor relevant threats and translate them into security improvements
Run and improve security awareness training, phishing simulations, and employee-facing guidance
Collaborate with IT, Product Security, and Compliance in a distributed team
Extend security operations coverage into US time zones and ensure smooth handoffs with EU colleagues

Requirements

What you’ll need

4+ years of experience in a corporate/enterprise security, security operations, or IT security engineering role
Hands-on experience with endpoint security (EDR) across macOS and Windows
Experience with device management (MDM); managing Linux endpoints is a plus
Strong working knowledge of IAM/SSO, MFA, modern IAM platforms, and least-privilege access practices
Experience operating SIEM and detection tooling, including writing and tuning rules, triaging alerts, and investigating suspicious activity
Experience with Splunk is preferred
Practical incident response experience covering investigation, containment, remediation, and root cause analysis
Experience coordinating with an external SOC/MSSP
Knowledge of network and host hardening, common attack techniques, and attack-surface reduction
Familiarity with ISO 27001 and SOC 2 and experience operating or evidencing security controls
Experience with vulnerability management and remediation
Ability to provide security operations coverage during US business hours
Scripting/automation ability in Python, Bash, or PowerShell is a strong plus, or demonstrated ability and desire to learn quickly
Experience running security awareness and phishing-simulation programs is a plus
Relevant certifications such as Security+, GIAC/GCIH/GCIA, CISSP, or vendor-specific EDR/SIEM/IAM certifications are a plus
Exposure to cloud and SaaS security posture, including AWS, Google Workspace, and M365, is a plus
Collaborative working style suited to a distributed team
Clear written communication and reliable handoffs across time zones
Must be based in the United States

Benefits

Comp & perks

Professional development and training
Attend conferences and working groups
Company outings, happy hours, hackathons, and tech talks
Competitive compensation package with a strong benefits plan
Work with passionate, talented and engaging colleagues
Be part of cutting-edge, open-source innovation
High-energy environment valuing openness, collaboration, risk-taking, and continuous growth