Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Hillspire is seeking an experienced Endpoint & SaaS Security Engineer to help build one of the industry's most advanced modern security programs. This role is responsible for protecting endpoints and the SaaS platforms running on them, while helping mature Hillspire's Zero Trust security architecture with a strong emphasis on device security posture, insider threat prevention, automation, and AI. The ideal candidate is equally comfortable investigating security alerts, engineering new security controls, building automation, and leveraging AI to improve operational efficiency. This is a hands-on engineering role with significant ownership and the opportunity to shape the future of endpoint, SaaS, and AI security across the organization.

Responsibilities

Own the health, configuration, and continuous improvement of Hillspire's endpoint security platform.
Administer Sophos Endpoint Protection, XDR, and MDR capabilities across all corporate devices.
Ensure 100% endpoint visibility and security coverage.
Investigate and remediate compromised, vulnerable, or non-compliant endpoints.
Develop endpoint security baselines aligned with Zero Trust principles.
Improve device security posture through vulnerability management, compliance monitoring, and hardening.
Build controls that reduce insider threats and prevent lateral movement.
Maintain visibility into SaaS applications.
Identify Shadow IT and unauthorized SaaS usage.
Govern BYOD, BYO-SaaS, and BYO-AI risks.
Monitor SaaS security posture.
Improve SaaS authentication and identity controls.
Partner with business teams to securely onboard new SaaS platforms.
Support vendor security reviews and third-party risk assessments.
Build Retrieval-Augmented Generation (RAG) solutions for security operations.
Develop automation that continuously scans Hillspire's security posture.
Use AI to improve incident response, investigations, and operational efficiency.
Help secure the organization's adoption of Generative AI technologies.
Monitor, investigate, and respond to security alerts.
Develop detection logic for insider threats.
Build automated remediation workflows.
Improve endpoint telemetry and visibility.
Enhance Zero Trust controls across users, devices, and applications.
Develop documentation, playbooks, and operational procedures.

Requirements

5+ years of cybersecurity engineering experience
Strong experience securing Windows and macOS endpoints
Experience working with Managed Detection & Response (MDR)
Experience implementing Zero Trust security principles
Knowledge of insider threat detection techniques
Experience with SaaS security
Understanding of Shadow IT and SaaS governance
Experience supporting BYOD environments
Embrace AI as a force multiplier
Implement solutions that rely on prompt engineering using leading AI platforms
Build AI-assisted workflows
Experiment with AI agents
Create MCP servers
Develop automation using modern AI frameworks

Skills

Endpoint Security
SaaS Security
Zero Trust Architecture
Automation
AI
Sophos Endpoint Protection
Sophos XDR
Sophos MDR
Vulnerability Management
Compliance Monitoring
Insider Threat Detection
Prompt Engineering
AI Agents
Splunk Enterprise Security
CrowdStrike
Okta
Google Workspace security
CASB
SSPM
Threat Intelligence Platforms
NIST Cybersecurity Framework

Location

San Francisco, CA

Work Type

Full-time
Contract-to-hire
Onsite

Experience Level

Experienced

Salary/Compensations

$200,000 - $225,000

Benefits

Company-sponsored training in Advanced Splunk engineering
Company-sponsored training in AI Advanced training

About the Company

Hillspire is seeking an experienced Endpoint & SaaS Security Engineer to help build one of the industry's most advanced modern security programs.
You'll join a small, highly technical security team with the opportunity to build—not just maintain—security capabilities.
You'll have access to cutting-edge AI platforms, best-in-class enterprise security tooling such as Wiz, Splunk, Palo Alto, and the freedom to engineer innovative solutions that improve the organization's security posture.
If you're passionate about endpoint security, SaaS security, Zero Trust, AI, automation, and building the future of cybersecurity, we'd love to hear from you.