Senior Corporate IT Security Engineer
Komodo Health · United States
About this role
**Senior Corporate IT Security Engineer — Komodo Health** **About Komodo Health** Komodo Health’s mission is to reduce the global burden of disease. The Healthcare Map combines de-identified, real-world patient data with innovative algorithms and decades of clinical experience to help partners answer complex healthcare questions. **The Opportunity** You will engineer and run **Corporate IT Security**, protecting the employee environment across: - Identity - Devices & endpoints - Internal networks - Workforce SaaS and AI tools - Workforce-related risk This role is a **senior individual contributor** position (no team management). Expect **~70% hands-on** work (configuring, scripting, investigating, remediating) and the remainder focused on corporate incident response, documentation, and cross-functional partnership. **What you’ll do (responsibilities)** - **Identity & access hardening:** phishing-resistant MFA, consistent SSO enforcement, session/sign-on policies, least-privilege admin roles, governance for service/non-human accounts. - **Device trust & conditional access:** posture-based access using MDM/EDR across **macOS + Windows**. - **Joiner-mover-leaver integrity:** app provisioning via identity provider only, timely verified deprovisioning, offboarding exception tracking, audit-ready access reviews. - **Workforce SaaS security posture:** export/API controls, session protections, OAuth & connected-app governance, audit-log monitoring, detection of shadow IT/config drift. - **Corporate incident response:** act as **Incident Commander** for corporate-environment incidents under the company incident response process; coordinate IT, Legal, Compliance, and Communications; drive investigation/remediation; run blameless post-incident reviews with tracked follow-ups. - **Workforce AI guardrails:** approved-tool standards, SSO/domain capture, RBAC, retention/logging/access reviews; new-tool intake feeds vendor security review. AI in products/engineering workflows stays with Security. **What you’ll accomplish in your first 12 months** - **First 90 days:** current-state assessment of corporate identity/devices/SaaS with a sequenced remediation backlog and named owners; highest-risk exposures addressed first. - Device posture tied to access; privileged access uses **phishing-resistant MFA**. - Provisioning/deprovisioning through the identity provider with measured offboarding SLAs and on-schedule access reviews. - Workforce SaaS governed with least-privilege export/API rights, session protections, OAuth/connected-app inventory, and corporate secrets kept out of SaaS/collaboration tools. - New identity/endpoint/SaaS-abuse detection use cases delivered with Security; corporate alerts routed to IT with defined ownership and response. - Tabletop exercises with IT, Security, Legal, and Communications; post-incident reviews with follow-ups tracked to completion. - Governance in place for shadow IT, risky OAuth grants, and workforce AI adoption. **What you bring (required)** - **6–8+ years** in corporate security/IT security/security engineering or security operations, including **4+ years hands-on** engineering of corporate controls at a cloud-native or SaaS company. - Deep hands-on experience with an **enterprise identity provider** and protocols: **SAML, OIDC, OAuth 2.0, SCIM** (sign-on/session policies, device assurance/conditional access, lifecycle automation). - Hands-on device trust experience with **MDM + EDR** across **macOS + Windows
Listing freshness
CronJobs last confirmed this listing 49m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.