Senior Corporate Security Engineer

Join Material, a cutting-edge security company, as a Senior Corporate Security Engineer. In this role, you will be responsible for enhancing our corporate security program, detecting and defending against sophisticated attacks, and ensuring our employees handle customer data with the utmost care. You will work in a modern startup environment, collaborating with engineering teams and utilizing the latest security tools. Benefits include remote work, comprehensive health coverage, competitive salary and equity, and more.

• Assurer la détection et la défense contre les attaques sophistiquées en renforçant les services d'entreprise et en améliorant l'efficacité de la détection.
• Identifier et combler les lacunes dans l'environnement de sécurité, reconstruire la détection et la réponse autour des outils de sécurité basés sur les LLM.
• Gérer la télémétrie d'entreprise et le contenu de détection, réduire le bruit avec une fidélité mesurée et construire des détections pour ce qui est important.

• You treat the IdP, the device fleet, and the SaaS estate as one system, and you harden the paths between them rather than each tool in isolation
• You work through design decisions by asking questions on both sides, and when the call goes against you, you respect it and build it
• You have put an LLM into a security workflow, measured it, and have specific views about where it should and should not be trusted
• You have owned a corporate stack end to end — devices, identity, SaaS, collaboration — and turned controls that were deployed into controls that are enforced
• You have responded to live incidents and made the containment call. You know what to revoke first
• When a job requires someone to do something manually and repetitively, your instinct is to build the system that makes that job unnecessary
• You have written detections that caught real attacks and removed the noise that buried the team, and you can explain how you measured the difference
• Bonus: you have written a technical paper, spoken at a technical conference, or maintain open-source security tooling
• Operator Depth: 6+ years in corporate or enterprise security or detection and response, with hands-on ownership of a SIEM, detection content, and incident response
• Identity Fundamentals: Deep understanding of OAuth, SAML/OIDC, session and token lifecycle, and how identity reaches cloud IAM
• Software Engineering: Comfortable in Python, Go, or TypeScript working directly against vendor APIs. You automate enforcement rather than configuring it by hand
• Applied LLM Judgment: You have built or seriously experimented with LLM-driven workflows, including prompting, tool use, and evaluation, and can explain how you would know whether one is doing a good job
• Software Development (nice to have): You have contributed detection logic or security features to a product codebase and are comfortable working inside an engineering team's review and release process
• Endpoint Fluency: You have managed a Mac fleet with a modern MDM and EDR and taken it from deployed to enforced
• How You Work: Collaborative, curious, direct. You work well next to more junior engineers without taking over, and you would rather engineer a problem away than staff it