Security Engineer III (Senior Enterprise Security Engineer/Corporate IT Security Engineer)

What You’ll Be Doing

• SaaS Security Posture Management (SSPM): Lead the implementation and management of the SSPM program, addressing misconfigurations in SaaS applications. Prioritize findings, create actionable remediation plans, and collaborate with application owners and IT to resolve issues.
• Endpoint Vulnerability Management: Oversee the endpoint vulnerability management lifecycle, from scanning to remediation tracking and reporting. Work with IT and infrastructure teams to ensure timely patching and configuration hardening, providing risk-based guidance on vulnerabilities.
• Office & Corporate Network Security: Design and enhance the security posture of office and corporate networks, including firewall management, network segmentation, DNS security, and monitoring for unusual traffic.
• Email Security: Manage email security measures to protect against phishing, spoofing, and malware. Maintain anti-spam and anti-phishing configurations, ensuring strict enforcement of SPF, DKIM, and DMARC policies.
• DNS & Web Security: Oversee DNS security controls to block malicious domains and prevent data exfiltration. Manage web security gateways and content filtering to enforce acceptable use policies and protect against web threats.
• Security Tooling Administration: Handle daily administration of enterprise security platforms, including configuration management and vendor engagement. Ensure effective operation and integration of tools for clear visibility across the enterprise.
• Cross-Functional Collaboration: Serve as a security partner to IT and infrastructure teams, providing guidance on new tools and projects. Support the broader security program through risk assessments and policy development.

• Enterprise Security Experience: Proven experience in a corporate security role, with hands-on responsibility for protecting systems, endpoints, and networks. Strong understanding of the enterprise threat landscape and risk management controls.
• SSPM & SaaS Security: Experience with SSPM tools (e.g., Adaptive Shield, AppOmni) and knowledge of SaaS misconfiguration risks. Ability to communicate findings and drive remediation with stakeholders.
• Endpoint Vulnerability Management: Experience with vulnerability scanning platforms (e.g., Qualys, Tenable) and familiarity with prioritization frameworks. Ability to work with IT for effective remediation.
• Email Security: Technical expertise in email security controls and experience with platforms like Proofpoint or Mimecast. Capability to investigate email threats and phishing incidents.
• DNS & Web Security: Experience with protective DNS solutions and web security gateways. Understanding of DNS attack techniques and detection methods.
• Network Security: Knowledge of corporate network security principles and experience with vendors like Palo Alto Networks or Fortinet.
• Security Tooling Administration: Proven ability to manage and maintain security platforms effectively. Comfort with configuring integrations and managing alert workflows.
• Security Frameworks & Standards: Familiarity with frameworks like NIST CSF and ISO 27001, and understanding of how security controls align with compliance requirements.
• Communication & Collaboration: Strong communication skills to convey technical risks to diverse audiences. Ability to work collaboratively across teams to achieve security objectives without hindering productivity.

We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce, enhances trust with our partners and customers, and drives business success. Build your career in a place where diversity, equity, inclusion and belonging aren’t just words on paper – this is what drives our innovation, it’s how we connect, and it contributes to what makes us a market leader. We believe in a hiring and working environment where all people are respected and valued, regardless of gender identity or expression, sexual orientation, religion, ethnicity, age, neurodiversity, disability status, citizenship, or any other aspect which makes people unique. We hire you for who you are, and we want you to bring your authentic self to work every day! 

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive equitable benefits and all privileges of employment. Please contact us to request accommodation.  

It has come to our attention that fraudulent and fictitious job opportunities are being circulated on the Internet. Prospective candidates are being contacted by certain individuals, mainly through telephone calls, emails and correspondence, claiming they are representatives of Anaplan. The main purpose of these correspondences and announcements is to obtain privileged information from individuals.  

Anaplan does not:  

• Extend offers to candidates without an extensive interview process with a member of our recruitment team and a hiring manager via video or in person.   
• Send job offers via email. All offers are first extended verbally by a member of our internal recruitment team whenever possible and then followed up via written communication.  

All emails from Anaplan would come from an @anaplan.com email address. Should you have any doubts about the authenticity of an email, letter or telephone communication purportedly from, for, or on behalf of Anaplan, please send an email to people@anaplan.com before taking any further action in relation to the correspondence.   

Candidate data processed during our recruitment activities is handled in accordance with our Candidate Privacy Notice. This may include the use of artificial intelligence or automated tools to assist our team in evaluating qualifications.