Senior Corporate Security Engineer, Navan
$127.5-230k
Salary dependent on location
Travel management company
Be an early applicant
Travel management company
201-500 employees
Be an early applicant
$127.5-230k
Salary dependent on location
201-500 employees
Company mission
To reinvent the legacy category of travel and expense with one of the first enterprise technologies utilising the cloud, mobile, and AI to balance business needs with today's modern standards.
Role
Who you are
- The ideal candidate will have a deep understanding of enterprise IT security within a modern SaaS company and will be passionate about automating and scaling security processes
- Experience: Minimum of 5 years of experience in corporate security engineering within a SaaS or similar environment
- Strong knowledge of securing devices and endpoints
- Proficiency with Okta for workforce Identity and Access Management; Okta Certification is a plus
- Experience with access management automation and workflows, using OKTA IGA (preferred), Microsoft Entra ID,, sailpoint or a similar platform
- Experience with securing Google Workspace and Microsoft Enterprise Suite
- Hands-on experience implementing an enterprise zero trust network access solution such as ZScaler a strong plus
- Familiarity with networking, switches, firewalls and minimal physical hardware setups
- Knowledge of deploying security solutions across SaaS applications
- Understanding of Zero Trust Network Access models
- Experience with infrastructure management tools (Puppet, Chef, Ansible, Terraform)
- Knowledge of Data Loss Prevention strategies in SaaS applications
- Experience with vulnerability management tools and methodologies
- Automation Skills: Ability to automate tasks using a scripting language or no-code/low-code automation tools
- Communication Skills: Ability to effectively communicate complex security concepts to technical and non-technical stakeholders, including collaboration with the physical security team
- Problem-Solving Abilities: Demonstrated ability to identify security risks and develop effective mitigation strategies
- Automation Mindset: Passion for automating processes to improve efficiency and scalability
- Nice to Have: Okta Certified Professional or higher, CISSP, CISM, or similar security certifications
- Education: Bachelor's degree in Computer Science, Information Security, or a related field preferred
What the job involves
- We are seeking a Senior Corporate Security Engineer to join our team
- This role is integral to ensuring the security of our corporate environment across all devices, applications, and networks
- You will work on securing our corporate infrastructure, implementing cutting-edge security solutions, and collaborating with various teams to enhance our overall security posture
- Manage Workforce IAM and identity governance (IGA): Oversee and optimize our Identity and Access Management systems, specifically leveraging Okta, to ensure secure and efficient user authentication and authorization and implement access management and approval automation workflows
- Secure Devices and Endpoints: Develop and implement security strategies for all corporate devices and endpoints to protect against unauthorized access and threats
- Implement Zero Trust Network Access: Design and deploy Zero Trust security models to enhance network security and safeguard company resources
- Enhance Email Security: Develop and maintain robust email security protocols to prevent phishing, spam, and other email-borne threats
- Deploy Data Loss Prevention (DLP) Solutions: Implement DLP strategies focusing on protecting PII and PCI data within SaaS applications like Google Workspace, Salesforce, and Box
- Enable Large-Scale Endpoint Management: Facilitate the deployment of secure operating systems and platforms at scale to reduce attack surfaces and improve endpoint management
- Orchestrate Security Posture Checks: Automate security checks for all new infrastructure deployments to ensure compliance with security standards
- Implement Endpoint State Attestation: Deploy tooling to continuously validate the security state of endpoints
- Scale Proactive Security Controls: Extend security measures to new environments, including those acquired through mergers or acquisitions
- Collaborate on Physical Security: Work closely with the physical security team to integrate security measures and communicate effectively about potential risks and solutions
- Stay Current with Industry Trends: Keep abreast of the latest security threats, technologies, and trends to proactively address potential vulnerabilities
- Develop Custom Security Solutions: Contribute to the development of custom and open-source security tools tailored to our needs
Our take
Navan (formerly known as TripActions) is operating in a crowded marketplace, betting against rivals with similar offerings of user interface personalisation technology. Even so, the company's growth has skyrocketed and it has attracted significant investor interest. Competitors cannot match Navan's cutting-edge, AI-driven services, as well as 24-hour customer support.
Since its founding in 2015 the company has seen significant growth in transactions and in active users. Having expanded from its core travel expense management product, it now offers a corporate card and general expenses management, underwriting its customers' short term business expenses with its own Liquid financial offering. Navan has a list of impressive clients, including Glassdoor, Zoom, and Shopify.
Moving forwards, the company is focused on gaining more reach, especially in Europe. As part of the expanded go-to-market strategy, it rebranded to Navan with a more people-centric design approach. It also combined its travel, corporate card and expense services into a single app which is now available to individual users rather than only through a corporate account. This will be key in bridging the gap between business travel and consumer apps.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Some candidates hear
back within 2 weeks
45% female employees
-40% employee growth in 12 months
Company
Funding (last 2 of 9 rounds)
Oct 2022
$154m
SERIES G
Oct 2021
$275m
SERIES F
Total funding: $1.1bn
Company benefits
- Flexible Vacation
- Healthcare
- Commuter benefits
- Parental leave
- Health and Wellness
- Fuel for Connection
- Pet Friendly
- 401k (retirement plan)
- IATAN (travel-related discounts)
- Connectivity Allowance
- Learning & Development
Company values
- Focus on Users
- Tech-Forward Solutions
- Lead with Context
- Communicate with Candor
- Raise the Bar
- One Diverse Team
Company HQ
Ventura, Palo Alto, CA
Articles
Leadership
Ariel Cohen
(CEO)Research and Development director in Mercury Interactive (and HP after acquisition of Mercury). Product Management director, then VP, at Jive Software. Previously co-founded StreamOnce with Ilan.
Ilan Twig
(CTO)Studied Computer Science, managing positions in software engineering including VP and EVP of engineering at Jive Software. Previously co-founded StreamOnce with Ariel.
Share this job
View 79 more jobs at Navan