Security Engineer, Corporate
San Francisco · 10+ years experience · Full-time · Onsite · Posted Oct 7, 2026
At a glance
- Experience
- 10+ years experience
- Employment
- Full-time
- Workplace
- Onsite
- Location
- San Francisco
About the role
- The Corporate Security Lead will build and scale the foundations of Serval's workforce, device, and SaaS security. This hands-on leadership role involves setting strategy for endpoint security, device trust, identity management, and corporate network access while mentoring a growing team.
Responsibilities
- Own endpoint security for the fleet, including hardened configuration baselines, detection, encryption, and patch management.
- Operate a device trust program to ensure only healthy, managed, and attested devices access corporate and production resources.
- Implement binary authorization and application controls to prevent unauthorized software execution.
- Build a SaaS Security Posture Management practice to secure configurations and govern third-party application access.
- Manage workforce identity, SSO, phishing-resistant MFA, and joiner/mover/leaver lifecycle processes.
- Lead corporate network security, including certificate-based network access control (802.1x) and zero-trust policies.
- Build, lead, and mentor a team spanning endpoint, corporate/SaaS security, and identity functions.
- Embed security by design by partnering with IT, Engineering, and People teams to create secure defaults.
- Utilize Serval's own agents to automate corporate security workflows.
Requirements
- 10+ years in cybersecurity with expertise in corporate/enterprise security, endpoint security, and workforce identity.
- Hands-on expertise securing and managing a Mac-native fleet, MDM, configuration management, and hardening on macOS.
- Experience building or operating device trust, binary authorization, and SaaS security posture management programs.
- Strong command of workforce identity, including SSO, phishing-resistant MFA, and lifecycle automation.
- Experience with OAuth application governance across corporate identity and productivity suites.
- Experience rolling out certificate-based network access control (802.1x) and zero-trust/mesh network access policies.
- Strong engineering and automation instincts with experience scripting and treating security controls as code.
- Demonstrated history of leadership and building/leading security teams.
Benefits
- Impact on product and company success
- Growth opportunities within an AI company
- Culture valuing innovation, ownership, accountability, and fun
Workplace
- Role is based in San Francisco.
Skills
- macOS
- MDM
- SSO
- MFA
- OAuth
- 802.1x
- SaaS Security Posture Management
- Endpoint Detection And Protection
- Scripting
