Enterprise Security Engineer - R01573019

• →Build Secure-by-Default Environments: Secure enterprise technologies, including SaaS applications, corporate endpoints, office networks, and Business/Data Intelligence platforms.
• →Modernize Endpoint Management: Improve endpoint management, identity, and security operations across macOS, iOS, Windows, and Linux environments. Strengthen endpoint security architecture, automation, and control deployment reliability.
• →Drive GitOps & Infrastructure-as-Code: Manage endpoint and SaaS security configurations using Terraform, version control, merge requests, CI pipelines, and automated deployments.
• →Automate Endpoint Security Lifecycle: Develop automation for secure endpoint provisioning, configuration, patching, and software distribution while maintaining security and compliance standards.
• →Manage AI & MCP Security: Establish AI security guardrails for business applications and Model Context Protocol (MCP) servers. Evaluate prompt security, review AI-generated applications, and manage approved AI agents and endpoint tools.
• →Assess Third-Party & AI Risks: Evaluate security controls and AI-related risks associated with third-party systems integrated into the enterprise environment. Conduct architecture, design, and process automation reviews.
• →Support Security Detection & Response: Partner with the Detection and Response team to develop incident workflows, identify security priorities, and implement solutions to mitigate Business Email Compromise (BEC) threats.
• →Continuously Improve Security Controls: Perform regular security assessments of enterprise applications and controls while developing security principles and tools to support organizational growth and AI adoption.

• Security Engineering: Strong practical experience in at least one or more areas, including endpoint security, identity management, AI security, or Infrastructure-as-Code.
• Programming & Automation: Proficiency in Python or Go, with experience developing automation solutions for security operations and infrastructure management.
• Infrastructure-as-Code & GitOps: Hands-on experience with Terraform, including module design, state management, code reviews, version control, and CI/CD pipeline-based deployments.
• Endpoint Management: Experience with endpoint management and security platforms such as Jamf Pro, FleetDM, MDM, or EDR. Strong knowledge of managing and securing macOS environments at scale.
• SaaS & Identity Security: Experience configuring and managing security controls for identity providers and enterprise platforms such as Okta, Google Workspace, and LDAP.
• Identity & Authentication Protocols: Understanding of SSO, SAML, SCIM, OAuth, OIDC, SMTP, and DNS protocols.
• AI & MCP Security: Experience with AI security controls, MCP server management, secure AI integrations, and managing approved AI tools and agents.
• Security Risk Assessment: Ability to conduct threat modeling, security assessments, architecture reviews, and third-party risk evaluations.

• Experience implementing Data Loss Prevention (DLP), firewall policies, and enterprise security controls.
• Hands-on experience managing Okta integrations, tools, and MCP environments.
• Ability to identify and communicate security vulnerabilities and recommend effective remediation strategies.
• Strong collaboration skills and the ability to guide development teams toward secure engineering practices.
• Ability to work effectively with distributed, remote teams across multiple functions.
• A practical, empathetic, and accountable approach to security engineering.
• Strong interest in continuously learning and adapting to emerging security technologies and threats.

 

Know more about DI: https://www.brillio.com/services-digital-infrastructure/

 

Know what it’s like to work and grow at Brillio: https://www.brillio.com/join-us/

Brillio is an equal opportunity employer to all, regardless of age, ancestry, colour, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding, and related medical conditions), and sexual orientation.

#LI-AY1