Senior Corporate Security Engineer

The role

The Senior Corporate Security Engineer will design, build, and operate technical security controls for the corporate environment. This includes securing identity, endpoints, SaaS platforms, cloud services, and AI-enabled workflows.

What you will do

• Design, build and operate technical security controls across the corporate technology environment
• Engineer scalable security solutions for identity, endpoints, SaaS platforms, and cloud-connected services
• Translate security requirements into technical controls, automations, and detections
• Partner with IT Engineering to embed secure-by-design practices
• Design and improve identity and access controls across workforce systems and SaaS applications
• Implement controls for MFA, conditional access, device trust, and least privilege
• Engineer and improve security controls across Mac, Windows, mobile and BYOD environments
• Build and improve detections, alerts, dashboards, and response workflows
• Help secure the use of AI tools, LLM platforms, and AI-enabled workflows
• Design and operate controls that protect PHI, employee data, and clinician data

Required qualifications

• 5+ years of experience in security engineering, corporate security, infrastructure security, enterprise security, IT security, cloud security or a related technical discipline
• Deep hands-on experience designing, building and operating technical security controls in enterprise environments
• Experience securing identity, endpoints, SaaS platforms, collaboration tools, cloud-connected services and internal systems
• Strong experience with identity and access management concepts, including MFA, conditional access, privileged access, lifecycle automation, service accounts and least privilege
• Experience working with security tools such as MDR platforms, EDR, SIEM, cloud security tools, endpoint management tools, vulnerability management tools or DLP systems
• Experience with security platforms and telemetry sources such as Expel MDR, SentinelOne, Wiz, CloudTrail, Sumo Logic or similar tools
• Experience with endpoint security, MDM, secure configuration management and vulnerability remediation across Mac, Windows or mobile environments
• Experience using scripting, APIs or automation tools such as Python, Bash, PowerShell, Workato, Terraform, REST APIs, webhooks or JSON
• Familiarity with detection engineering, alert tuning, incident response workflows and security operations processes
• Strong understanding of Zero Trust principles, identity-centric security, least privilege, device trust and secure system design
• Ability to work cross-functionally with IT, Security, Engineering, Compliance and business stakeholders
• Able to work a hybrid schedule of 4 days/week in our Nashville office and located within 75 minutes' commuting distance of the office

Nice to have

• Experience operating at a Staff Engineer or senior technical leadership level
• Experience in healthcare, financial services or other regulated environments
• Experience supporting HIPAA, SOC 2, NIST, ISO 27001 or similar security and compliance frameworks
• Experience securing enterprise AI tools, LLM platforms, AI agents or AI-enabled workflows
• Exposure to AI platforms and security tools such as OpenAI, Anthropic, LiteLLM, Prompt Security, Pillar or similar technologies
• Experience with DLP, CASB, SSPM, browser security, SaaS posture management or data discovery tools
• Experience securing Google Workspace, Okta, Jamf, Microsoft Intune, GitHub, Slack, Atlassian, AWS or similar enterprise platforms
• Experience building automations using REST APIs, webhooks, JSON, service accounts and API authentication patterns
• Experience partnering with managed security providers, MDR teams, external auditors or compliance teams
• Familiarity with AI security risks including sensitive data exposure, prompt injection, model access control, third-party plugin risk and AI system logging

Benefits

• Comprehensive benefits to all full-time employees
• Stock options

About the company

Charlie Health connects the world to life-saving behavioral health treatment through personalized, virtual care. The organization is a rapidly growing team redefining behavioral health treatment.