Senior Corporate Security Engineer

🕒 October 16

🏄 California – Remote

🏄 California – Remote

💵 $220k - $240k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Material Security

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2017

🔒 Cybersecurity

🔐 Security

Cybersecurity • Software • Security

Material Security is a cybersecurity company focused on multi-layered detection and response solutions specifically for email. It offers products that provide phishing protection, identity protection, and data protection for emails and Google Drive. The company's solutions are designed to detect, contain, and prevent email account takeovers, block unauthorized access, and govern email data. Material Security utilizes advanced technologies including AI and behavioral analysis to enhance security across email platforms like Microsoft 365 and Google Workspace.

📋 Description

• Own corporate telemetry and detection content • Close detection coverage gaps and reduce noise with measured fidelity • Build detections for account takeover, session token theft, malicious OAuth grants, admin abuse, and insider exfiltration • Lead corporate incident response and own playbooks • Design and build an LLM-driven agent for near-real-time review of privileged access grants, customer data access, and high-fidelity endpoint and identity alerts • Create labeled evaluation sets and measure precision and recall • Define limits on automated action and defend against manipulation through log content or employee replies • Manage Mac fleet devices and endpoint detection with the CorpSec team • Automate update enforcement, deepen EDR coverage, deploy browser-level DLP, and enforce BYOD posture on iOS and Android • Maintain the identity provider and SaaS estate • Maintain phishing-resistant authentication, address applications without SSO, automate access-review evidence, and pipeline vendor and OAuth application review • Manage Google Workspace admin alerting, OAuth governance, Apps Script governance, sharing, and DLP • Partner with Engineering to test and ship detection updates based on the company’s own Google Workspace tenant • Work with AppSec on corporate-to-production boundary detections, just-in-time access, and logging • Turn corporate security learnings into product detection improvements for customers

🎯 Requirements

• 6+ years in corporate or enterprise security or detection and response • Hands-on ownership of a SIEM, detection content, and incident response • Comfortable in Python, Go, or TypeScript working directly against vendor APIs • Deep understanding of OAuth, SAML/OIDC, session and token lifecycle, and how identity reaches cloud IAM • Experience managing a Mac fleet with modern MDM and EDR and taking it from deployed to enforced • Experience building or seriously experimenting with LLM-driven workflows, including prompting, tool use, and evaluation • Ability to explain how to measure LLM workflow performance • Collaborative, curious, and direct working style • Experience working alongside more junior engineers without taking over • Nice to have: contributions of detection logic or security features to a product codebase • Bonus: technical paper, technical conference presentation, or open-source security tooling

🏖️ Benefits

• Remote-first workplace • Office in San Francisco, California • Equal employment opportunity and inclusive work environment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume