[Hiring] Staff Corporate Security Engineer @DFNS

Role Description

Our platform secures a lot of value and has never been breached. Companies like ours rarely fail through the product. They fail through a laptop, an identity, a SaaS integration or a leaver whose access was never removed. You will own corporate security for a company spread across Europe, America, and Asia, with controls strong enough to pass a bank’s due diligence and light enough that engineers do not route around them. In year one you will make identity, endpoints and SaaS provably controlled, build detection for the corporate estate and carry the corporate control set through our SOC 1, SOC 2, ISO 27001, and ISO 22301 audits.

• Own identity and access across the company (SSO, MFA, passkeys, device trust, automated joiner, mover and leaver flows).
• Harden and manage endpoints and the SaaS estate, from MDM and EDR to Google Workspace and the tools we run the company on.
• Build detection and response for corporate systems, from centralized logging and alerting to runbooks, and lead the response when something happens.
• Run asset inventory and vulnerability management for corporate infrastructure, with automation in place of spreadsheets.
• Keep the SOC 1, SOC 2, ISO 22301, and ISO 27001, 27017 and 27018 controls you own operating and audit ready, and carry them through surveillance audits.
• Design security awareness and phishing resilience that makes staff the first line of defense rather than the weakest link.
• Work with Infrastructure and Product Security so the boundary between corporate and production is explicit, enforced and tested.

Qualifications

• Experience owning corporate security at a technology company, hands on, as the person who built and ran the controls.
• Deep identity and access expertise across SSO and identity providers, MFA and passkeys, device trust and automated access lifecycle.
• Endpoint and SaaS security in practice, including MDM, EDR and Google Workspace administration and investigation.
• Experience building detection and running incident response for corporate systems, including a SIEM or equivalent.
• Scripting and automation (Python, Bash, APIs) to automate controls and the evidence they produce.
• Experience operating controls under SOC 2 or ISO 27001 and supporting audits.
• Writing clear enough that an auditor and an engineer read the same document and both understand it.

Requirements

• Cloud security fundamentals on AWS.
• Experience in fintech or another regulated, audited environment.
• Experience running a macOS fleet at scale.
• Business continuity and disaster recovery planning.

Benefits

• A competitive base salary set by role and location, a bonus or variable plan where the role carries one and stock options vesting over four years.
• Healthcare, flexible vacation, parental leave and a once-a-year home technology allowance, with travel expenses covered.
• A MacBook and the equipment you need to do your best work.
• Remote first, with an office if you want one.

Company Description

DFNS is an equal opportunity employer and considers every applicant based on ability and potential, regardless of race, color, religion, sex, gender identity or expression, sexual orientation, national origin, disability, age or any other characteristic protected by law. If you need an accommodation at any point in the process, tell us and we will arrange it.