Staff Security Engineer

The role

You will own and mature security for systems used by the workforce, focusing on endpoints and email. You will engineer, deploy, and harden controls while writing standards and baselines for the team.

What you will do

• Own engineering of security controls for macOS and Windows fleet
• Engineer MDM and MAM policies for managed devices and BYOD
• Deploy and manage an enterprise browser to secure SaaS and web access
• Build, apply, and measure CIS Benchmark baselines across the fleet
• Drive application control and least-privilege on endpoints
• Own email security for Google Workspace environment
• Tune controls to reduce risk and partner with SecOps on phishing triage
• Write security standards, configuration baselines, and runbooks
• Implement and validate controls through threat modeling and security reviews
• Contribute to audit readiness for HITRUST and SOC 2

Required qualifications

• 8+ years in security engineering
• Deep, hands-on expertise in endpoint security and email security
• Experience deploying and operating MDM/MAM platforms (Kandji, Jamf, Intune, or similar) and email security platforms
• Experience deploying and managing an enterprise browser platform
• Hands-on experience implementing CIS Benchmarks and measuring compliance at fleet scale
• Exposure to network security: secure remote access (ZTNA/VPN), DNS filtering, segmentation, or firewall policy
• Working knowledge of cloud security fundamentals (AWS preferred): IAM, network controls, logging, and workforce access to cloud environments
• Exposure to DevSecOps practices: infrastructure as code, CI/CD security, secrets management, or security tooling in pipelines
• Scripting ability in Python, Bash, PowerShell, or similar
• Experience working in a regulated environment (HIPAA, HITRUST, SOC 2, PCI, or similar) and producing audit evidence
• Clear written communication

Nice to have

• Healthcare or health tech experience, especially environments handling PHI
• Experience with Okta or another enterprise identity provider
• Experience supporting a multi-entity organization with subsidiaries or acquisitions
• Relevant certifications (GIAC, CISSP, OSCP, or cloud security certs)

Benefits

• Competitive compensation
• Medical, Dental & Vision
• Flexible Spending / Health Savings Accounts
• Generous PTO
• 401(k) with Company Match
• Life Insurance
• Pet Insurance

About the company

OpenLoop provides telehealth support solutions designed to streamline and simplify go-to-market care delivery for companies across all 50 states. The company has a relatively flat organizational structure with core values of Autonomy, Competence and Belonging.