Corporate Security Engineer

📋 Description

• Own day-to-day CrowdStrike Falcon administration, tuning, and RT Response across all endpoints.
• Operate and mature ThreatLocker for allowlisting, ringfencing, and storage control.
• Administer Island Enterprise Browser; enforce SaaS access, copy/paste, and downloads policies.
• Drive endpoint hardening and baselines (MDM, patch SLAs, FileVault/BitLocker, CIS).
• Maintain a defensible inventory of endpoints and remediation gaps.
• Own corporate incident response for endpoint, identity, email, and insider events.

🎯 Requirements

• 3–5 years of experience in corporate security, endpoint security, or insider risk.
• Hands-on EDR experience (prefer CrowdStrike Falcon) with tuning, IOAs/IOCs, and RT Response.
• Experience with application control/zero-trust tooling (ThreatLocker, Airlock, AppLocker).
• Familiar with enterprise browsers (Island, Talon, Chrome) and data/SaaS access controls.
• Strong Google Workspace security background: admin controls, context-aware access, OAuth, DLP.
• Investigate incidents end-to-end (phishing, malware, DLP, insider risk) with documentation.
• Fundamentals in IAM, endpoint hardening, MDM, logging, and SIEM-based detection.
• Scripting in Python/Bash; experience with security orchestration platforms (Tines, Torq, XSOAR) a plus.

🎁 Benefits

• Medical, dental, and vision insurance.
• Stock options.
• Monthly home-office stipend.
• 401k (TransAmerica).
• 12 weeks paid parental leave.
• 11 paid company holidays.