Enterprise Security Engineer - R01573019

About the company

Brillio

Information technology and services · 5,001 to 10,000 employees

What you need

• Build Secure-by-Default Environments: Secure enterprise technologies, including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence platforms.
• Modernize Endpoint Management: Improve endpoint management, identity, and security operations across macOS, iOS, Windows, and Linux environments. Strengthen endpoint security architecture, automation, and control deployment reliability.
• Drive GitOps & Infrastructure-as-Code: Manage endpoint and SaaS security configurations using Terraform, version control, merge requests, CI pipelines, and automated deployments.
• Automate Endpoint Security Lifecycle: Develop automation for secure endpoint provisioning, configuration, patching, and software distribution while maintaining security and compliance standards.
• Manage AI & MCP Security: Establish AI security guardrails for business applications and Model Context Protocol (MCP) servers. Evaluate prompt security, review AI-generated applications, and manage approved AI agents and endpoint tools.
• Assess Third-Party & AI Risks: Evaluate security controls and AI-related risks associated with third-party systems integrated into the enterprise environment. Conduct architecture, design, and process automation reviews.
• Support Security Detection & Response: Partner with the Detection and Response team to develop incident workflows, identify security priorities, and implement solutions to mitigate Business Email Compromise (BEC) threats.
• Continuously Improve Security Controls: Perform regular security assessments of enterprise applications and controls while developing security principles and tools to support organizational growth and AI adoption.
• Security Engineering: Strong practical experience in at least one or more areas, including endpoint security, identity management, AI security, or Infrastructure-as-Code.
• Programming & Automation: Proficiency in Python or Go, with experience developing automation solutions for security operations and infrastructure management.
• Infrastructure-as-Code & GitOps: Hands-on experience with Terraform, including module design, state management, code reviews, version control, and CI/CD pipeline-based deployments.
• Endpoint Management: Experience with endpoint management and security platforms such as Jamf Pro, FleetDM, MDM, or EDR. Strong knowledge of managing and securing macOS environments at scale.
• SaaS & Identity Security: Experience configuring and managing security controls for identity providers and enterprise platforms such as Okta, Google Workspace, and LDAP.
• Identity & Authentication Protocols: Understanding of SSO, SAML, SCIM, OAuth, OIDC, SMTP, and DNS protocols.
• AI & MCP Security: Experience with AI security controls, MCP server management, secure AI integrations, and managing approved AI tools and agents.
• Security Risk Assessment: Ability to conduct threat modeling, security assessments, architecture reviews, and third-party risk evaluations.
• Experience implementing Data Loss Prevention (DLP), firewall policies, and enterprise security controls.
• Hands-on experience managing Okta integrations, tools, and MCP environments.
• Ability to identify and communicate security vulnerabilities and recommend effective remediation strategies.
• Strong collaboration skills and the ability to guide development teams toward secure engineering practices.
• Ability to work effectively with distributed, remote teams across multiple functions.
• A practical, empathetic, and accountable approach to security engineering.
• Strong interest in continuously learning and adapting to emerging security technologies and threats.

Keywords for your resumePro

The words this employer's screening is likely to look for.