Senior Security Engineer, Navan
$127.5-230k
4+ days a week in office
Travel management company
Be an early applicant
Travel management company
1001+ employees
Be an early applicant
$127.5-230k
4+ days a week in office
1001+ employees
Company mission
To reinvent the legacy category of travel and expense with one of the first enterprise technologies utilising the cloud, mobile, and AI to balance business needs with today's modern standards.
Role
Who you are
- The ideal candidate will have a deep understanding of enterprise IT security within a modern SaaS company and will be passionate about automating and scaling security processes
- Experience: Minimum of 5 years of experience in corporate security engineering within a SaaS or similar environment
- Expert-level proficiency with the Okta platform for workforce Identity and Access Management (SSO, MFA, IGA) Okta Certification is a strong plus
- Demonstrated experience designing and implementing complex access management automation and workflows, with a strong preference for candidates skilled in Okta Access Requests and Okta Workflows
- Strong knowledge of securing devices and endpoints, including hands-on experience with Mobile Device Management platforms like Microsoft Intune
- Familiarity with Microsoft Entra ID in hybrid or multi-cloud environments
- Experience with securing Google Workspace and Microsoft 365/Enterprise Suite
- Hands-on experience implementing an enterprise zero trust network access solution such as ZScaler is a strong plus
- Understanding of Zero Trust Network Access models
- Experience with infrastructure management tools (Puppet, Chef, Ansible, Terraform)
- Knowledge of Data Loss Prevention strategies in SaaS applications
- Experience with vulnerability management tools and methodologies
- Automation Mindset: Passion for automating processes to improve efficiency and scalability
- Communication Skills: Ability to effectively communicate complex security concepts to technical and non-technical stakeholders, including collaboration with the physical security team
- Problem-Solving Abilities: Demonstrated ability to identify security risks and develop effective mitigation strategies
- Highly Desirable: Okta Certified Professional or Higher, Microsoft Security Certifications
- Nice to Have: CISSP, CISM, or similar security certifications
- Education: Bachelor's degree in Computer Science, Information Security, or a related field preferred
What the job involves
- We are seeking a Senior Corporate Security Engineer to join our team
- This role is integral to ensuring the security of our corporate environment across all devices, applications, and networks
- You will work on securing our corporate infrastructure, implementing cutting-edge security solutions, and collaborating with various teams to enhance our overall security posture
- Manage Workforce IAM and Identity Governance: Lead the management and optimization of our Workforce IAM and Identity Governance systems, demonstrating deep, hands-on knowledge across the entire Okta platform
- You will be responsible for designing and enforcing granular authentication policies, managing the full lifecycle of application access through Okta Access Requests and Entitlements, and leveraging Okta Device Trust to establish a zero-trust security posture for all corporate resources
- Federate and Configure Application Access: Integrate a wide range of SaaS and custom applications into our identity platforms, Okta and Microsoft Entra ID, for single sign-on
- This requires a strong technical understanding of modern federation protocols including SAML 2.0, OpenID Connect, and SCIM for automated user provisioning
- Secure Devices and Endpoints: Develop and implement comprehensive security strategies for a diverse fleet of corporate devices
- This includes managing Windows endpoints with Microsoft Intune, macOS devices with Jamf, and ChromeOS devices via the Google Admin console, ensuring all endpoints are protected against unauthorized access and threats
- Manage Endpoint Detection and Response (EDR): Lead the deployment, administration, and tuning of our EDR platform, specifically the CrowdStrike Falcon suite
- Your responsibilities will include leveraging products like Falcon Insight for incident investigation, Falcon Prevent for next-gen antivirus, and proactive threat hunting to identify and neutralize advanced threats on corporate endpoints
- Implement Zero Trust Network Access: Design and deploy Zero Trust security models to enhance network security and safeguard company resources
- Deploy Data Loss Prevention Solutions: Implement DLP strategies focusing on protecting PII and PCI data within SaaS applications like Google Workspace, Salesforce, and Box
- Enable Large-Scale Endpoint Management: Oversee the deployment and maintenance of secure operating systems and platforms at scale
- A key responsibility is to implement and manage a robust patch management strategy across all corporate operating systems (Windows, macOS, ChromeOS), ensuring timely remediation of vulnerabilities to reduce the company's attack surface
- Orchestrate Security Posture Checks: Automate security checks for all new infrastructure deployments to ensure compliance with security standards
- Implement Endpoint State Attestation: Deploy tooling, such as Microsoft Entra Conditional Access and Intune compliance policies, to continuously validate the security state of endpoints
- Scale Proactive Security Controls: Extend security measures to new environments, including those acquired through mergers or acquisitions
- Stay Current with Industry Trends: Keep abreast of the latest security threats, technologies, and trends to proactively address potential vulnerabilities
- Develop Custom Security Solutions: Contribute to the development of custom and open-source security tools tailored to our needs
Our take
Navan (formerly known as TripActions) is operating in a crowded marketplace, betting against rivals with similar offerings of user interface personalisation technology. Even so, the company's growth has skyrocketed and it has attracted significant investor interest. Competitors cannot match Navan's cutting-edge, AI-driven services, as well as 24-hour customer support.
Since its founding in 2015 the company has seen significant growth in transactions and in active users. Having expanded from its core travel expense management product, it now offers a corporate card and general expenses management, underwriting its customers' short term business expenses with its own Liquid financial offering. Navan has a list of impressive clients, including Glassdoor, Zoom, and Shopify.
Moving forwards, the company is focused on gaining more reach, especially in Europe. As part of the expanded go-to-market strategy, it rebranded to Navan with a more people-centric design approach. It also combined its travel, corporate card and expense services into a single app which is now available to individual users rather than only through a corporate account. This will be key in bridging the gap between business travel and consumer apps, especially in the lead-up to its reported IPO in the near future.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 9 rounds)
Oct 2022
$154m
SERIES G
Oct 2021
$275m
SERIES F
Total funding: $1.1bn
Company benefits
- Flexible Vacation
- Healthcare
- Commuter benefits
- Parental leave
- Health and Wellness
- Fuel for Connection
- Pet Friendly
- 401k (retirement plan)
- IATAN (travel-related discounts)
- Connectivity Allowance
- Learning & Development
Company HQ
Ventura, Palo Alto, CA
Leadership
Ariel Cohen
(Co-Founder & CEO)Research and Development director in Mercury Interactive (and HP after acquisition of Mercury). Product Management director, then VP, at Jive Software. Previously co-founded StreamOnce with Ilan.
Ilan Twig
(Co-Founder & CTO)Studied Computer Science, managing positions in software engineering including VP and EVP of engineering at Jive Software. Previously co-founded StreamOnce with Ariel.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 85 more jobs at Navan