Senior Corporate Security Engineer

Join Cockroach Labs as a Senior Corporate Security Engineer, where you'll play a crucial role in protecting our endpoints, cloud platforms, internal applications, and enterprise SaaS environment. This hands-on, cross-functional position focuses on AI governance, data protection, and corporate security operations. You'll help shape our AI adoption strategy, strengthen our data loss prevention and SaaS security controls, and lead security initiatives from design through implementation.

• Contribuer à la construction et à la gestion du programme de gouvernance de l'IA, y compris les contrôles de sécurité pour les outils et agents d'IA.
• Développer et sécuriser les applications internes hébergées sur GCP, y compris notre passerelle LLM interne.
• Concevoir et maintenir les contrôles DLP, de classification des données et de gouvernance qui protègent les données sensibles tout en permettant à l'entreprise de fonctionner.

• Experience owning a security program, major initiative, or complex cross-functional project
• 5+ years of experience in corporate security, security operations, IT security, or a related field
• Experience securing cloud-hosted applications and corporate IT environments
• Strong project management, communication, and cross-functional collaboration skills
• Familiarity with the security and data risks associated with AI tools, applications, agents, and integrations
• Hands-on experience with DLP, CASB, or SaaS security tools, including creating and tuning policies
• Experience conducting risk assessments, gap assessments, or threat modeling
• A strong understanding of identity and access management, endpoints, email, file-sharing systems, networks, and enterprise SaaS applications
• Experience with Netskope, Zscaler, GCP, Okta, Google Workspace, CrowdStrike Falcon, or similar technologies
• Experience building AI governance controls or securing AI applications and agents
• Previous experience in IT support or systems administration
• Experience with SIEM, SOAR, and security automation tools such as Tines or Python
• Familiarity with frameworks such as NIST, SOC 2, ISO 27001, GDPR, or CIS Critical Controls
• Experience using AI development tools such as Claude Code or Cursor
• Relevant security certifications, such as Security+, CISSP, or CCSP