Senior Corporate Security Engineer

Join Mirantis, a leading cloud-native technology company, as a Senior Corporate Security Engineer. In this hands-on engineering role, you will be responsible for endpoint protection, device management, identity and access management, and the detection-and-response stack. You will also support our compliance program and work closely with IT, Product Security, and Compliance. This is a remote position based in the United States.

Define and own the security policies, hardening baselines, and compliance posture for endpoint protection (EDR) and device management (MDM) across the fleet.

Responsibilities

• Administer and strengthen identity and access management (IAM/SSO, MFA) and partner with IT to keep the identity layer secure.
• Operate the SIEM and detection tooling, tuning rules, triaging alerts, and investigating suspicious activity, and coordinate with the external SOC on monitoring and escalations.

Requirements

• Experience with vulnerability management and translating findings into concrete remediation
• Experience operating a SIEM and detection tooling — writing and tuning rules, triaging alerts, and investigating suspicious activity. Experience with Splunk is preferred
• Practical incident response experience — investigation, containment, remediation, and root cause analysis — and comfort coordinating with an external SOC/MSSP
• Exposure to cloud and SaaS security posture (AWS, Google Workspace, M365) is a plus
• Strong working knowledge of identity and access management — SSO, MFA, and modern IAM platforms (e.g., Okta, Entra ID/Azure AD, Google Workspace) — and least-privilege access practices
• Solid grasp of security fundamentals — network and host hardening, common attack techniques, and how to reduce attack surface
• Familiarity with compliance frameworks such as ISO 27001 and SOC 2, and experience operating or evidencing security controls
• 4+ years of experience in a corporate/enterprise security, security operations, or IT security engineering role
• Based in the United States, with the ability to provide security operations coverage during US business hours
• A collaborative working style suited to a distributed team, with clear written communication and reliable handoffs across time zones
• Scripting/automation ability (Python, Bash, PowerShell) to streamline security operations is a strong plus; alternatively, a demonstrated ability and strong desire to pick these up quickly

Preferred

• Experience running security awareness and phishing-simulation programs is a plus
• Relevant certifications (e.g., Security+, GIAC/GCIH/GCIA, CISSP, or vendor-specific EDR/SIEM/IAM certs) are a plus
• Hands-on experience with endpoint security (EDR) across macOS and Windows; experience with device management (MDM) and managing Linux endpoints is a plus