Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Sr. Corporate Security Engineer role.
Rezi rewrites your resume against Material Security's job description. Free.
Tailor your resume to this Sr. Corporate Security Engineer role.
Rezi rewrites your resume against Material Security's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Sr. Corporate Security Engineer posting at Material Security — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Sr. Corporate Security Engineer posting at Material Security — free, in seconds.
About the Role
Material works with sophisticated security teams, protecting Google Workspace. Your mission is to enhance our corporate security program, making it rigorous, measured, and adapted to LLM-based tooling. Success means detecting and defending against sophisticated attacks by hardening services, improving detection efficacy, reducing response times, and ensuring employees handle customer data with appropriate trust.
Responsibilities
- Own corporate telemetry and detection content, closing coverage gaps, reducing noise, and building detections for account takeover, session token theft, malicious OAuth grants, admin abuse, and exfiltration.
- Lead corporate incident response and own the playbooks.
- Design and build an agent for near real-time review of privileged access grants, customer data access, and high-fidelity endpoint and identity alerts, with labeled evaluation sets, measured precision and recall, and explicit limits on automated action.
- Automate update enforcement, deepen EDR coverage, bring browser-level DLP to the Mac fleet, and enforce BYOD posture on iOS and Android.
- Maintain phishing-resistant authentication, address applications without SSO, automate access-review evidence, and transition manual vendor and OAuth application review into a pipeline.
- Manage Google Workspace admin alerting, OAuth governance, Apps Script governance, sharing, and DLP, using Material's own product.
- Partner with Engineering to propose, test, and ship detection updates to the product based on observations in the corporate tenant.
- Manage detections that cross the corporate to production boundary, just-in-time access, and logging for user activity.
Requirements
- Owned a corporate stack end-to-end (devices, identity, SaaS, collaboration) and enforced controls.
- Treat IdP, device fleet, and SaaS estate as a single system, hardening paths between them.
- Written detections that caught real attacks, removed noise, and measured the difference.
- Responded to live incidents and made containment calls.
- Instinct to automate repetitive manual tasks.
- Put an LLM into a security workflow, measured it, and have specific views on its trustworthiness.
- Work through design decisions by considering multiple perspectives and respecting decisions made.
- 6+ years in corporate or enterprise security or detection and response, with hands-on ownership of a SIEM, detection content, and incident response.
- Comfortable in Python, Go, or TypeScript working directly against vendor APIs.
- Automate enforcement rather than configuring it manually.
- Deep understanding of OAuth, SAML/OIDC, session and token lifecycle, and how identity reaches cloud IAM.
- Managed a Mac fleet with a modern MDM and EDR, taking it from deployed to enforced.
- Built or seriously experimented with LLM-driven workflows, including prompting, tool use, and evaluation, and can explain how to assess performance.
- Contributed detection logic or security features to a product codebase and are comfortable working within an engineering team's review and release process.
- Collaborative, curious, and direct work style.
- Work well with more junior engineers without taking over.
- Prefer to engineer problems away rather than staff them.
Skills
- LLM-based security tooling
- Corporate security
- Detection and response
- SIEM
- Incident response
- Python
- Go
- TypeScript
- Vendor APIs
- OAuth
- SAML/OIDC
- Session and token lifecycle
- Cloud IAM
- Mac fleet management
- MDM
- EDR
- LLM-driven workflows
- Prompting
- Tool use
- Evaluation
- Detection logic
- Security features
Location
- Remote-first
- San Francisco, California
Work Type
- Remote
- Full-time
Experience Level
- 6+ years in corporate or enterprise security or detection and response
Salary/Compensations
- $220,000-$240,000 annually
About the Company
- Material Security is a remote-first workplace with an office in San Francisco, California.
Equal Opportunity
- Material Security is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, creed, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, marital status, veteran status, disability, genetic information, or any other legally protected status. All employment decisions are based on qualifications, merit, and business needs.